Medium severity · published Oct 28, 2026
CVE-2026-117608
Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow
New
6.1
CVSS
–
EPSS
No
On KEV
Description
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
assimp · assimp
through 6.0.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-117608
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-117608
issue-tracking
https://github.com/assimp/assimp/issues/6929
patch
https://github.com/assimp/assimp/pull/6963
patch
https://github.com/assimp/assimp/commit/7dbc85d9218fae017d4fad70269e7569f7b0c870
technical-description
https://github.com/assimp/assimp/blob/v6.0.5/code/AssetLib/MD2/MD2Loader.cpp#L171-L176
product
https://github.com/assimp/assimp
third-party-advisory
https://www.vulncheck.com/advisories/assimp-through-6.0.5-heap-out-of-bounds-read-via-md2-importer-integer-overflow
More from assimp
9.8
CVE-2025-2152
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3
8.8
CVE-2025-3015
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3
8.8
CVE-2025-2757
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3
8.8
CVE-2025-2756
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3
8.8
CVE-2025-2755
A vulnerability was found in Open Asset Import Library Assimp 5.4.3