CVE-2026-19999
assimp: Assimp: Remote buffer overflow allows information disclosure or denial of service
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 17, 2026
Updated · August 17, 2026
Description
A buffer overflow in Assimp's ParseBoneTrafoKeys_3DGS_MDL7 function allows a remote attacker to cause a denial of service or potentially access sensitive information by tricking a user into loading a maliciously crafted 3DGS MDL7 file.
Statement
This Moderate Assimp vulnerability allows a remote attacker to cause a denial of service or information disclosure via a crafted 3DGS MDL7 file. Red Hat products are not affected because their builds exclude the vulnerable code.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.6CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:H
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')