A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulation of the argument transmatrix_count/pcBoneTransforms leads to buffer overflow.
It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is 50d767984e78d51b53e2020fdf0967fd624bc377.
It is recommended to apply a patch to fix this issue.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
Low
Partial disruption
CVSS Vector v4.0
Weakness Type (CWE)
References 8
https://github.com/assimp/assimp/commit/50d767984e78d51b53e2020fdf0967fd624bc377
cna@vuldb.com
https://github.com/assimp/assimp/issues/6633
cna@vuldb.com
https://github.com/assimp/assimp/pull/6759
cna@vuldb.com
https://github.com/user-attachments/files/27429337/poc.zip
cna@vuldb.com
https://vuldb.com/cve/CVE-2026-19999
cna@vuldb.com
https://vuldb.com/submit/873132
cna@vuldb.com
https://vuldb.com/vuln/391200
cna@vuldb.com
https://vuldb.com/vuln/391200/cti
cna@vuldb.com