PT-2026-45276

CVE-2026-10232

Published

2026-06-01

Updated

2026-07-24

Description by

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5

Description A use after free issue exists in the ASE File Parser component within the aiNode::~aiNode() function of the scene.cpp file. This flaw allows a local attacker to execute a manipulation that leads to the use of memory after it has been freed.

Recommendations Update to version 6.0.5 or later. As a temporary workaround, restrict the use of the ASE File Parser component.

Exploitability

Exploit

Fix

Impacts

Researchers

Tygls

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416: Use After Free