EUVD-2026-41601
GHSA-rc6p-2pj8-p4v9
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only vector requiring low-privilege file delivery to trigger CSM parsing; limited C/I/A impact with no scope change matches heap overflow with constrained impact.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
5DescriptionCVE.org
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been published and may be used. Patch name: eb84eec580d3f4ba2f0fd87409b7d0744620f11e. Applying a patch is the recommended action to fix this issue.
AnalysisAI
Heap-based buffer overflow in Assimp's CSM file handler (versions 6.0.0-6.0.5) allows a local low-privileged attacker to corrupt heap memory by supplying a crafted Character Studio Motion (CSM) file to any application that uses the library for asset import. The flaw exists in Assimp::CSMImporter::InternReadFile within code/AssetLib/CSM/CSMLoader.cpp and affects all Assimp 6.0.x releases confirmed by EUVD-2026-41601. No public exploit identified at time of analysis as a KEV entry, but a publicly available exploit code (poc.zip) exists, and the upstream patch commit is available though not yet confirmed in a tagged release.
Technical ContextAI
Assimp (Open Asset Import Library) is a C++ library designed to import a wide range of 3D model file formats for use in game engines, visualizers, and content creation tools (CPE: cpe:2.3:a:open_asset_import_library:assimp). The affected code path is the CSM (Character Studio Motion) importer, specifically InternReadFile in code/AssetLib/CSM/CSMLoader.cpp. CWE-122 (Heap-based Buffer Overflow) describes a write operation that exceeds the bounds of a heap-allocated buffer - in C++ this can corrupt adjacent heap metadata or object fields. Depending on heap layout and runtime conditions, such overflows can lead to controlled crashes or, in more complex scenarios, to arbitrary code execution. The CVSS 4.0 vector AV:L/AC:L/AT:N/PR:L/UI:N confirms the attack is purely local with low attack complexity and no special attack preconditions beyond file delivery.
RemediationAI
Apply the upstream fix available at commit eb84eec580d3f4ba2f0fd87409b7d0744620f11e (https://github.com/assimp/assimp/commit/eb84eec580d3f4ba2f0fd87409b7d0744620f11e) via pull request #6649 (https://github.com/assimp/assimp/pull/6649). Upstream fix available (PR/commit); released patched version not independently confirmed - consumers using package managers (vcpkg, Conan, distro packages) should monitor the Assimp release page for a tagged version incorporating this commit before deploying. As a compensating control, projects that do not require CSM format support can disable the CSM importer at build time using Assimp's CMake configuration (set ASSIMP_BUILD_CSM_IMPORTER to OFF), eliminating the vulnerable code path entirely with no functional impact for non-CSM workflows. Additionally, restricting which file types can be submitted to Assimp-dependent applications from untrusted sources reduces the attack surface without requiring a rebuild.
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function wi
Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component A
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. Rated medium
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz t
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. Rated medium severity (CV
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic.h of the component CSM
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. Rated medium severity (
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3.cpp. Rated m
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. Rated medium severity (CVSS
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. Rated medium severity (
Same weakness CWE-122 – Heap-based Buffer Overflow
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today