CVE-2026-19999
Received Received - Intake

Buffer Overflow in Open Asset Import Library Assimp

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: VulDB

Description
A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulation of the argument transmatrix_count/pcBoneTransforms leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is 50d767984e78d51b53e2020fdf0967fd624bc377. It is recommended to apply a patch to fix this issue.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-19999
EUVD
EUVD-2026-60065

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
assimp assimp to 17c12da (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a buffer overflow in the Open Asset Import Library (Assimp) affecting the MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 function. It occurs when parsing malformed MDL7 files, specifically when the transmatrix_count argument is manipulated. The function does not validate if the pcBoneTransforms pointer stays within buffer bounds, leading to an out-of-bounds read that can cause crashes or unintended behavior.

Detection Guidance

To detect this vulnerability, monitor for crashes or memory corruption when processing MDL7 files using Assimp. Use AddressSanitizer (ASAN) during fuzz testing to identify heap-buffer-overflow issues in the MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 function.

Impact Analysis

This vulnerability could allow remote attackers to cause crashes or execute arbitrary code by exploiting a crafted MDL7 file. If you process untrusted MDL7 files with Assimp, an attacker could trigger a heap-buffer-overflow, potentially leading to denial of service or further exploitation.

Compliance Impact

This vulnerability, a heap-buffer-overflow in the Assimp library's MDL importer, could potentially lead to unauthorized data access or corruption if exploited. While not directly tied to GDPR or HIPAA, such vulnerabilities may violate compliance requirements for data integrity and security, especially if exploited in systems handling sensitive personal or health data.

Mitigation Strategies

Apply the patch from commit 50d767984e78d51b53e2020fdf0967fd624bc377 which adds validation for frame size in the MDL asset loader. Update to the latest version of Assimp that includes this fix.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-19999. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart