CVE-2026-82591— Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow
Quick assessment
Affected
Open Asset Import Library Assimp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Open Asset Import Library（assimp）6.0.2 及更早版本中检测到一个安全漏洞。受影响的组件是文件 中的函数 。在对参数 的操作会导致基于堆的缓冲区溢出。该攻击只能从本地环境发起。补丁的标识符为 。应用该补丁是修复此问题的推荐措施。
Possible ATT&CK Techniques 2 AI
T1059.003 · Windows Command Shell T1210 · Exploitation of Remote Services
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-82591
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow. The attack can only be performed from a local environment. The identifier of the patch is bf9dabb617c46e5133dac65cca6bff177917afcb. Applying a patch is the recommended action to fix this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
堆缓冲区溢出
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Open Asset Import Library | Assimp | 6.0.0 |
cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-82591
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-82591
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-82591 (2)
Vendor Advisories for CVE-2026-82591 (3)
-
🔗 CVE-2026-82591 in Assimp third-party-advisory
-
🔗 CVE-2026-82591 Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow vdb-entry technical-description
-
IV. Related Vulnerabilities
Same product: Assimp
-
CVE-2026-19999
Open Asset Import Library Assimp 3DGS MDL7 Bone Transformati -
CVE-2026-19970
Open Asset Import Library Assimp Node MDLLoader.cpp AddBones -
CVE-2026-19969
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh -
CVE-2026-19968
Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h -
CVE-2026-19967
Open Asset Import Library Assimp File Compression.cpp decomp
Same vendor: Open Asset Import Library
-
CVE-2026-19970
Open Asset Import Library Assimp Node MDLLoader.cpp AddBones -
CVE-2026-19969
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh -
CVE-2026-19968
Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h -
CVE-2026-19967
Open Asset Import Library Assimp File Compression.cpp decomp -
CVE-2026-14610
Open Asset Import Library Assimp CSM File CSMLoader.cpp Inte
Same weakness: CWE-122
-
CVE-2026-38821
openNDS 11.0.0 前堆缓冲区溢出漏洞 -
CVE-2026-19313
Fireware OS Pre-Authentication Heap Buffer Overflow in iked -
CVE-2026-81851
Fireware OS Heap-Based Buffer Overflow in iked Allows Denial -
CVE-2026-34674
Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122) -
CVE-2026-77652
Dia: dia: heap buffer overflow in wpg colormap parser via ou
V. Comments for CVE-2026-82591
No comments yet