PT-2026-73184

CVE-2026-19967

Published

2026-08-17

Updated

2026-08-17

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 17c12da

Description A heap-based buffer overflow exists in the File Parser component. The issue occurs within the decompressBlock() function located in the code/Common/Compression.cpp file. A remote attacker can trigger this flaw through specific manipulation, potentially leading to memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Tygls

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

Related identifiers