Junglewise Threat Intelligence

CVE-2026-14610: Open Asset Import Library Assimp heap overflow in CSM File Handler

CVE-2026-14610 · Severity: medium · CVSS 5.3 · Published 2026-07-03

Technologies: Assimp Asset Import Library. Vendors: Assimp.

Executive brief

A vulnerability exists in the Open Asset Import Library (Assimp), a widely used tool for importing various 3D model formats into applications. When processing specially crafted Character Studio Motion (CSM) files, the library may experience a memory error that can lead to an application crash or allow an attacker to execute unauthorized code. This issue primarily affects systems where an attacker can provide a malicious file for the software to process locally.

Technical details

A heap-based buffer overflow exists in Assimp up to version 6.0.5 within the `Assimp::CSMImporter::InternReadFile` function in `code/AssetLib/CSM/CSMLoader.cpp`. The vulnerability is triggered when a CSM file defines a `$LastFrame` value that is less than or equal to the `$FirstFrame` value. This results in an insufficient memory allocation for position keys, causing subsequent write operations to exceed the buffer boundaries. An attacker can exploit this locally by providing a malformed CSM file to an application using the library. A patch has been released (commit eb84eec) which implements a check to ensure the frame range is positive before allocation.

Affected products

  • Open Asset Import Library Assimp up to 6.0.5

Timeline

  • 2026-05-12: disclosed: Issue first reported on GitHub
  • 2026-06-04: patched: Fix merged into master branch
  • 2026-07-03: advisory: CVE published to NVD

References

Related threats