CVE-2026-19970

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 17c12da

Description A heap-based buffer overflow occurs in the Node Parser component within the file code/AssetLib/MDL/MDLLoader.cpp. The issue is triggered by the manipulation of the bones num argument in the Assimp::MDLImporter::AddBonesToNodeGraph 3DGS MDL7() function, which allows for remote execution of the attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.