# Assimp vulnerabilities Source: https://junglewise.ai/threats/technologies/assimp Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 11 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/assimp.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 18 vulnerabilities in Assimp: 0 in the last 7 days and 5 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-111128, was published on 15 October 2026. 1 vulnerability in the last four weeks, level on the four before (1). ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 5 - All time: 18 (0 critical, 0 exploited in the wild) ## About Assimp Assimp is a portable Open Source library to import various well-known 3D model formats in a uniform manner. ## Latest Assimp vulnerabilities - [CVE-2026-111128: Assimp NULL pointer dereference in Ogre3D importer](https://junglewise.ai/threats/cve-2026-111128-assimp-through-6-0-5-contains-a-null-pointer-dereference) (medium, CVSS 5.5, published 15 Oct 2026) - [CVE-2026-108573: Assimp out-of-bounds read in PLY file handler](https://junglewise.ai/threats/cve-2026-108573-a-vulnerability-was-detected-in-open-asset-import-library-assimp) (medium, CVSS 5.5, published 11 Oct 2026) - [CVE-2026-19970: Assimp MDLImporter heap-based buffer overflow in AddBonesToNodeGraph](https://junglewise.ai/threats/cve-2026-19970-assimp-mdlimporter-heap-based-buffer-overflow-in) (medium, CVSS 6.3, published 17 Aug 2026) - [CVE-2026-19969: Assimp MDL importer heap buffer overflow](https://junglewise.ai/threats/cve-2026-19969-assimp-mdl-importer-heap-buffer-overflow) (medium, CVSS 5.4, published 17 Aug 2026) - [CVE-2026-19968: Assimp heap buffer overflow in LWO2 model parser](https://junglewise.ai/threats/cve-2026-19968-assimp-heap-buffer-overflow-in-lwo2-model-parser) (medium, CVSS 4.3, published 17 Aug 2026) - [CVE-2026-14610: Open Asset Import Library Assimp heap overflow in CSM File Handler](https://junglewise.ai/threats/cve-2026-14610-open-asset-import-library-assimp-heap-overflow-in-csm-file) (medium, CVSS 5.3, published 3 Jul 2026) - [CVE-2026-14604: Open Asset Import Library Assimp double free in PLY Model Handler](https://junglewise.ai/threats/cve-2026-14604-open-asset-import-library-assimp-double-free-in-ply-model-handler) (medium, CVSS 6.3, published 3 Jul 2026) - [CVE-2025-15666: Open Asset Import Library Assimp heap overflow in SceneCombiner::Copy](https://junglewise.ai/threats/cve-2025-15666-open-asset-import-library-assimp-heap-overflow-in-scenecombiner) (medium, CVSS 5.3, published 1 Jul 2026) - [CVE-2026-10233: Assimp out-of-bounds read in HL1MDLLoader](https://junglewise.ai/threats/cve-2026-10233-assimp-out-of-bounds-read-in-hl1mdlloader) (low, CVSS 3.3, published 1 Jun 2026) - [CVE-2026-10232: Assimp use after free in ASE File Parser](https://junglewise.ai/threats/cve-2026-10232-assimp-use-after-free-in-ase-file-parser) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10231: Assimp heap overflow in HL1MDLLoader](https://junglewise.ai/threats/cve-2026-10231-assimp-heap-overflow-in-hl1mdlloader) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10230: Assimp heap overflow in Half-Life 1 MDL Loader](https://junglewise.ai/threats/cve-2026-10230-assimp-heap-overflow-in-half-life-1-mdl-loader) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10229: Assimp heap overflow in HL1MDLLoader](https://junglewise.ai/threats/cve-2026-10229-assimp-heap-overflow-in-hl1mdlloader) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10201: Assimp divide by zero in FBXExporter](https://junglewise.ai/threats/cve-2026-10201-assimp-divide-by-zero-in-fbxexporter) (low, CVSS 3.3, published 1 Jun 2026) - [CVE-2026-10200: Assimp heap overflow in glTFCommon 4x4 Matrix Parser](https://junglewise.ai/threats/cve-2026-10200-assimp-heap-overflow-in-gltfcommon-4x4-matrix-parser) (medium, CVSS 5.3, published 31 May 2026) - [CVE-2026-10199: Assimp null pointer dereference in glTF2Asset.h](https://junglewise.ai/threats/cve-2026-10199-assimp-null-pointer-dereference-in-gltf2asset-h) (low, CVSS 3.3, published 31 May 2026) - [CVE-2026-10198: Assimp null pointer dereference in glTFImporter](https://junglewise.ai/threats/cve-2026-10198-assimp-null-pointer-dereference-in-gltfimporter) (low, CVSS 3.3, published 31 May 2026) - [CVE-2026-10197: Assimp null pointer dereference in glTF2Importer::ImportEmbeddedTextures](https://junglewise.ai/threats/cve-2026-10197-assimp-null-pointer-dereference-in-gltf2importer) (low, CVSS 3.3, published 31 May 2026) ## Most severe Assimp vulnerabilities - [CVE-2026-19970: Assimp MDLImporter heap-based buffer overflow in AddBonesToNodeGraph](https://junglewise.ai/threats/cve-2026-19970-assimp-mdlimporter-heap-based-buffer-overflow-in) (medium, CVSS 6.3, published 17 Aug 2026) - [CVE-2026-14604: Open Asset Import Library Assimp double free in PLY Model Handler](https://junglewise.ai/threats/cve-2026-14604-open-asset-import-library-assimp-double-free-in-ply-model-handler) (medium, CVSS 6.3, published 3 Jul 2026) - [CVE-2026-111128: Assimp NULL pointer dereference in Ogre3D importer](https://junglewise.ai/threats/cve-2026-111128-assimp-through-6-0-5-contains-a-null-pointer-dereference) (medium, CVSS 5.5, published 15 Oct 2026) - [CVE-2026-108573: Assimp out-of-bounds read in PLY file handler](https://junglewise.ai/threats/cve-2026-108573-a-vulnerability-was-detected-in-open-asset-import-library-assimp) (medium, CVSS 5.5, published 11 Oct 2026) - [CVE-2026-19969: Assimp MDL importer heap buffer overflow](https://junglewise.ai/threats/cve-2026-19969-assimp-mdl-importer-heap-buffer-overflow) (medium, CVSS 5.4, published 17 Aug 2026) - [CVE-2026-14610: Open Asset Import Library Assimp heap overflow in CSM File Handler](https://junglewise.ai/threats/cve-2026-14610-open-asset-import-library-assimp-heap-overflow-in-csm-file) (medium, CVSS 5.3, published 3 Jul 2026) - [CVE-2025-15666: Open Asset Import Library Assimp heap overflow in SceneCombiner::Copy](https://junglewise.ai/threats/cve-2025-15666-open-asset-import-library-assimp-heap-overflow-in-scenecombiner) (medium, CVSS 5.3, published 1 Jul 2026) - [CVE-2026-10232: Assimp use after free in ASE File Parser](https://junglewise.ai/threats/cve-2026-10232-assimp-use-after-free-in-ase-file-parser) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10231: Assimp heap overflow in HL1MDLLoader](https://junglewise.ai/threats/cve-2026-10231-assimp-heap-overflow-in-hl1mdlloader) (medium, CVSS 5.3, published 1 Jun 2026) - [CVE-2026-10230: Assimp heap overflow in Half-Life 1 MDL Loader](https://junglewise.ai/threats/cve-2026-10230-assimp-heap-overflow-in-half-life-1-mdl-loader) (medium, CVSS 5.3, published 1 Jun 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, level on the four before (1). | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 3 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 1 | 0 | 0 | | 12 Oct 2026 | 1 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Assimp technologies - [Assimp Open Asset Import Library](https://junglewise.ai/threats/technologies/open-asset-import-library): 3 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Assimp vulnerabilities", https://junglewise.ai/threats/technologies/assimp, 11 November 2026.