PT-2026-83638

CVE-2026-82591

Published

2026-08-30

Updated

2026-09-25

Description by

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp versions prior to 6.0.3

Description A heap-based buffer overflow occurs when manipulating the iNewIndex argument within the MD5Importer::MakeDataUnique() function located in the code/AssetLib/MD5/MD5Loader.cpp file. This issue can be exploited from a local environment.

Recommendations Apply the patch identified as bf9dabb617c46e5133dac65cca6bff177917afcb to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

Related identifiers