CVE-2026-117608
MEDIUM
MEDIUM
Priority: 0.01
BB Relevance:
39/100
Published: 2026-10-28
Modified: 2026-10-28
First seen: 2026-10-29
Status: active
Attack Surface
Low Complexity
No Auth
CVSS Vector Breakdown
AV:
Local
AC:
Low
PR:
None
UI:
Passive
AT:
None
VC:
Low
VI:
None
VA:
High
Description
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.