Assimp · Assimp · CVE-2026-10200
**Name of the Vulnerable Software and Affected Versions**
Assimp versions prior to 6.0.5
**Description**
A heap-based buffer overflow exists in the 4x4 Matrix Parser component within the `glTFCommon.h` library. This issue occurs in the `glTFCommon::CopyValue()` function and can be triggered by a local attacker through specific manipulation, potentially allowing for arbitrary code execution.
**Recommendations**
Update to version 6.0.5 or later.
As a temporary workaround, restrict the use of the `glTFCommon::CopyValue()` function in the 4x4 Matrix Parser component.