CVE-2026-19969
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
CVSS Score
5.4
EPSS Score
0.0%
EPSS Percentile
0th
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-120 CWE-119 |
| Vendor | open asset import library |
| Product | assimp |
| Published | Aug 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for open asset import library assimp
Be the first to know when new medium vulnerabilities affecting open asset import library assimp are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Open Asset Import Library / Assimp
17c12da
References
vuldb.com: https://vuldb.com/vuln/391146 vuldb.com: https://vuldb.com/vuln/391146/cti vuldb.com: https://vuldb.com/cve/CVE-2026-19969 vuldb.com: https://vuldb.com/submit/873130 github.com: https://github.com/assimp/assimp/issues/6631 github.com: https://github.com/user-attachments/files/27425495/poc.zip
Credits
🔍 TYGLS (VulDB User) VulDB CNA Team