CVE-2026-10200

A flaw was found in Assimp. A local attacker could trigger a heap-based buffer overflow in the glTFCommon::CopyValue function, part of the 4x4 Matrix Parser component. This vulnerability could lead to limited information disclosure, denial of service, or other impacts on system integrity and availability.

This Moderate-severity heap-based buffer overflow in Assimp's glTFCommon::CopyValue function allows a local attacker to cause information disclosure, denial of service, or other impacts by manipulating 4x4 matrix parsing. Exploitation requires local access to the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, users should avoid processing untrusted 3D model files with applications that utilize the Assimp library. Restricting local user access to systems where Assimp is used to process potentially untrusted data can also reduce the attack surface.