Executive brief
Assimp is a widely used library for importing various 3D model formats into applications. A vulnerability was found where processing a specially crafted 3D file (glTF2 format) can cause the application to crash. This could lead to a denial-of-service, interrupting operations for users or systems that rely on this library to process 3D assets.
Technical details
A null pointer dereference exists in Assimp up to version 6.0.4 within the glTF2Importer::ImportEmbeddedTextures function located in code/AssetLib/glTF2/glTF2Importer.cpp. The vulnerability is triggered when a glTF2 file contains a 'mimeType' string that lacks the expected '/' delimiter. The code performs pointer arithmetic on the result of strchr() without verifying if the character was found, leading to an invalid memory access (dereferencing 0x1) during a subsequent strncmp call. An attacker with local access can provide a malformed file to cause a crash (Denial of Service). A patch has been proposed in pull request #6645 to validate the strchr result before use.
Affected products
- Assimp Assimp up to 6.0.4
Timeline
- 2026-05-12: other: Issue reported and pull request created on GitHub
- 2026-05-31: advisory: Vulnerability published in VulDB and NVD