CVE-2026-19968

A flaw was found in Open Asset Import Library Assimp. A remote attacker could exploit a heap-based buffer overflow vulnerability in the ReadFaces_3DGS_MDL7 function of the 3DGS MDL7 Model Parser by providing a specially crafted 3DGS MDL7 model file. This could lead to a denial of service.

This Moderate impact flaw in Assimp's 3DGS MDL7 Model Parser could lead to a denial of service. Exploitation requires a user to process a specially crafted 3DGS MDL7 model file, limiting the attack vector to scenarios involving untrusted input.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce the risk of exploitation, avoid processing untrusted 3DGS MDL7 model files with applications that use the Assimp library. Limiting the handling of such files to trusted sources is advised.