PT-2026-55650

CVE-2026-14610

Published

2026-07-03

Updated

2026-10-25

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp versions prior to 6.0.6

Description A heap-based buffer overflow occurs in the CSM File Handler component. The issue resides in the Assimp::CSMImporter::InternReadFile() function within the code/AssetLib/CSM/CSMLoader.cpp file. This flaw allows for local execution to trigger the overflow.

Recommendations Apply patch eb84eec580d3f4ba2f0fd87409b7d0744620f11e to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Tygls

Vendors

Affected products

Weakness enumeration

CWE-122: Heap-based Buffer Overflow

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer