Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Assimp — Vulnerabilities & Security Advisories 60

All 60 CVE vulnerabilities found in Assimp, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerability data for the Assimp 3D asset import library, focusing on software weaknesses within its parsing and processing engines. The collection encompasses a wide spectrum of security flaws, including buffer overflows, integer overflows, and code execution risks, spanning from the library's initial public release through the most recent patched versions. Readers can utilize this resource to track the vendor's official security advisories, gain a comprehensive understanding of the specific weakness classes affecting 3D model importers, or examine the complete historical record of vulnerabilities associated with the Assimp product line. By centralizing these details, the page supports security researchers and developers in assessing risk exposure and prioritizing remediation efforts for applications relying on this widely used open-source component. The data presented reflects confirmed issues reported by the community and the development team, offering a clear view of the security posture evolution over time without requiring external cross-referencing of scattered reports. This consolidated view enables efficient analysis of recurring attack vectors and helps organizations maintain robust defenses against potential exploitation in their 3D content workflows.

Vendor: Open Asset Import Library

CVE ID Title CVSS Severity Published
CVE-2026-111129 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track CWE-476 5.5 Medium 2026-10-15
CVE-2026-111128 Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment CWE-476 5.5 Medium 2026-10-15
CVE-2026-108573 Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds CWE-125 5.5 Medium 2026-10-11
CVE-2026-82591 Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow CWE-122 5.3 Medium 2026-08-30
CVE-2026-19999 Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow CWE-120 6.3 Medium 2026-08-17
CVE-2026-19970 Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow CWE-122 6.3 Medium 2026-08-17
CVE-2026-19969 Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow CWE-120 5.4 Medium 2026-08-17
CVE-2026-19968 Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow CWE-122 4.3 Medium 2026-08-17
CVE-2026-19967 Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow CWE-122 6.3 Medium 2026-08-17
CVE-2026-14610 Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow CWE-122 5.3 Medium 2026-07-03
CVE-2026-14604 Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free CWE-415 6.3 Medium 2026-07-03
CVE-2025-15666 Open Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow CWE-122 5.3 Medium 2026-07-01
CVE-2026-10233 Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds CWE-125 3.3 Low 2026-06-01
CVE-2026-10232 Assimp ASE File scene.cpp ~aiNode use after free CWE-416 5.3 Medium 2026-06-01
CVE-2026-10231 Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow CWE-122 5.3 Medium 2026-06-01
CVE-2026-10230 Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow CWE-122 5.3 Medium 2026-06-01
CVE-2026-10229 Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow CWE-122 5.3 Medium 2026-06-01
CVE-2026-10201 Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero CWE-369 3.3 Low 2026-05-31
CVE-2026-10200 Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow CWE-122 5.3 Medium 2026-05-31
CVE-2026-10199 Assimp glTF2Asset.h LazyDict null pointer dereference CWE-476 3.3 Low 2026-05-31
CVE-2026-10198 Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference CWE-476 3.3 Low 2026-05-31
CVE-2026-10197 Assimp TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference CWE-476 3.3 Low 2026-05-31
CVE-2025-15538 Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free CWE-416 5.3 Medium 2026-01-18
CVE-2025-11277 Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow CWE-122 5.3 Medium 2025-10-05
CVE-2025-11275 Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow CWE-122 5.3 Medium 2025-10-05
CVE-2025-11274 Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources CWE-770 3.3 Low 2025-10-05
CVE-2025-6120 Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow CWE-122 5.3 Medium 2025-06-16
CVE-2025-6119 Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free CWE-416 5.3 Medium 2025-06-16
CVE-2025-5204 Open Asset Import Library Assimp MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 out-of-bounds CWE-125 3.3 Low 2025-05-26
CVE-2025-5203 Open Asset Import Library Assimp ParsingUtils.h SkipSpaces out-of-bounds CWE-125 3.3 Low 2025-05-26

All 60 known CVE vulnerabilities affecting Assimp with full Chinese analysis, references, and POCs where available.