PT-2026-55650 · Assimp · Assimp

Tygls · Published 2026-07-03 · Updated 2026-07-03 · CVE-2026-14610

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp versions prior to 6.0.6

Description A heap-based buffer overflow occurs in the CSM File Handler component. The issue resides in the Assimp::CSMImporter::InternReadFile() function within the code/AssetLib/CSM/CSMLoader.cpp file. This flaw allows for local execution to trigger the overflow.

Recommendations Apply patch eb84eec580d3f4ba2f0fd87409b7d0744620f11e to resolve the issue.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2026-14610

Affected Products

Assimp

References · 10

• 🔥❌ https://github.com/user-attachments/files/27235863/poc.zip · Exploit, Deleted
• https://github.com/assimp/assimp/pull/6649 · Patch
• https://github.com/assimp/assimp/commit/eb84eec580d3f4ba2f0fd87409b7d0744620f11e · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-14610 · Security Note
• https://github.com/assimp/assimp/issues/6622 · Note
• https://vuldb.com/vuln/376118/cti · Note
• https://vuldb.com/vuln/376118 · Note
• https://twitter.com/CVEnew/status/2073191227420242026 · Twitter Post
• https://vuldb.com/submit/844646 · Note
• https://vuldb.com/cve/CVE-2026-14610 · Note