AS
Product
assimp
by assimp · last CVE Oct 28, 2026
70
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 25Medium 36Low 8
Watch

Add assimp to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-3016
6.5
1%
Mar 31
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2022-38528
6.5
1%
Sep 6
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes
Affected: 5.2.5
CVE-2026-19999
6.3
0%
Aug 17
Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow
Affected: 17c12da
CVE-2026-19970
6.3
0%
Aug 17
Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
Affected: 17c12da
CVE-2026-19967
6.3
0%
Aug 17
Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow
Affected: 17c12da
CVE-2026-14604
6.3
0%
Jul 3
Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2024-53425
6.2
0%
Nov 21
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3
Affected: 5.4.3
CVE-2024-48426
6.2
0%
Oct 24
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer
Affected: 5.4.3
CVE-2026-117608
New
6.1–Oct 28
Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow
Affected: through 6.0.5
CVE-2026-111129
5.5
0%
Oct 15
Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track
Affected: through 6.0.5
CVE-2026-111128
5.5
0%
Oct 15
Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment
Affected: through 6.0.5
CVE-2026-108573
5.5
0%
Oct 11
Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
CVE-2025-11274
5.5
0%
Oct 5
A vulnerability was determined in Open Asset Import Library Assimp 6.0.2
Affected: 6.0.2
CVE-2025-5169
5.5
0%
May 26
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2025-5168
5.5
0%
May 26
A vulnerability was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2025-5167
5.5
0%
May 26
A vulnerability was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2025-5166
5.5
0%
May 26
A vulnerability was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2025-5165
5.5
0%
May 26
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic
Affected: 5.4.3
CVE-2025-3196
5.5
0%
Apr 4
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2025-2591
5.5
1%
Mar 21
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3
Affected: 5.4.3
CVE-2024-48425
5.5
0%
Oct 24
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer
Affected: 5.4.3
CVE-2024-48424
5.5
0%
Oct 24
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX…
Affected: 5.4.3
CVE-2021-45948
5.5
1%
Jan 1
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper)
Affected: 5.1.0; 5.1.1
CVE-2026-19969
5.4
0%
Aug 17
Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
Affected: 17c12da
CVE-2026-82591
5.3
0%
Aug 30
Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2
CVE-2026-14610
5.3
0%
Jul 3
Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5
CVE-2025-15666
5.3
0%
Jul 1
Open Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow
Affected: 5.4.0; 5.4.1; 5.4.2; 5.4.3
CVE-2026-10232
5.3
0%
Jun 1
Assimp ASE File scene.cpp ~aiNode use after free
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2026-10231
5.3
0%
Jun 1
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2026-10230
5.3
0%
Jun 1
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2026-10229
5.3
0%
Jun 1
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2026-10200
5.3
0%
May 31
Assimp 4x4 Matrix glTFCommon.h CopyValue heap-based overflow
Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4
CVE-2025-6120
5.3
0%
Jun 16
A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3
Affected: through 5.4.3
CVE-2025-6119
5.3
0%
Jun 16
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3
Affected: through 5.4.3
CVE-2026-19968
4.3
0%
Aug 17
Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow
Affected: 17c12da
CVE-2024-46632
4.3
0%
Sep 26
Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function
Affected: 5.4.3
Showing 36