CVE-2026-117608— Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow

Quick assessment

Affected

assimp assimp

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Assimp 6.0.5 及以下版本在函数中存在整数溢出漏洞。攻击者可利用精心构造的头部字段绕过帧表边界检查。通过提供恶意的文件，攻击者可操纵和数值，使其在 32 位尺寸检查中发生回绕，从而引发堆越界读取。该漏洞可能导致应用程序崩溃，或泄露相邻的堆内存数据。

CVSS 6.1 · Medium Updated Oct 28, 2026

Possible ATT&CK Techniques 1 AI

T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow

Source: CVE Program / CVE List V5

Vulnerability Description

Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

整数溢出或超界折返

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
assimp	assimp	0 ~ 6.0.5	-

II. Public POCs for CVE-2026-117608

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-117608

请登录查看更多情报信息。

Vendor Pages for CVE-2026-117608 (1)

🔗 GitHub - assimp/assimp: The official Open-Asset-Importer-Library Repository. Loads 40+ 3D-file-formats into one unified and clean data structure. · GitHub product

Other References for CVE-2026-117608 (4)

https://www.cve.org/CVERecord?id=CVE-2026-117608

IV. Related Vulnerabilities

Same product: assimp

Same vendor: assimp

Same weakness: CWE-190