CVE-2026-19968

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 17c12da

Description A heap-based buffer overflow can occur in the 3DGS MDL7 Model Parser component. The issue resides in the Assimp::MDLImporter::ReadFaces 3DGS MDL7() function within the code/AssetLib/LWO/LWOLoader.h library. A remote attacker can trigger this flaw through specific manipulation, potentially leading to memory corruption.

Recommendations Apply patch ee77bb09a42a49843ac85ef64c14d2328b251df1 to version 17c12da. As a temporary mitigation, restrict the use of the Assimp::MDLImporter::ReadFaces 3DGS MDL7() function.