CVE-2026-10201: Divide By Zero in Assimp
A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.
AI Analysis
Technical Summary
This vulnerability affects the Assimp library, specifically the FBXExporter::WriteObjects function in FBXExporter.cpp related to the UV Channel Handler. A crafted local manipulation can trigger a divide-by-zero error, potentially causing a crash or denial of service. The vulnerability exists in versions 6.0.0 through 6.0.4. The CVSS 4.0 base score is 4.8, reflecting low attack complexity and local attack vector with limited impact. The issue was tagged as a bug by the project and publicly disclosed, but no official patch or fix has been documented in the provided data.
Potential Impact
Successful exploitation can cause a divide-by-zero error leading to application instability or crash. The impact is limited to local users with the ability to execute code or manipulate the vulnerable function. There is no indication of privilege escalation, remote exploitation, or data compromise from the available information.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Applying a patch is advised once available. Until then, restrict local access to trusted users only to reduce risk. Monitor official Assimp project channels for updates or fixes addressing this issue.
CVE-2026-10201: Divide By Zero in Assimp
Description
A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.
CVSS v4.0
Score 4.8medium
Affected software
pkg:github/assimp/assimpRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the Assimp library, specifically the FBXExporter::WriteObjects function in FBXExporter.cpp related to the UV Channel Handler. A crafted local manipulation can trigger a divide-by-zero error, potentially causing a crash or denial of service. The vulnerability exists in versions 6.0.0 through 6.0.4. The CVSS 4.0 base score is 4.8, reflecting low attack complexity and local attack vector with limited impact. The issue was tagged as a bug by the project and publicly disclosed, but no official patch or fix has been documented in the provided data.
Potential Impact
Successful exploitation can cause a divide-by-zero error leading to application instability or crash. The impact is limited to local users with the ability to execute code or manipulate the vulnerable function. There is no indication of privilege escalation, remote exploitation, or data compromise from the available information.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Applying a patch is advised once available. Until then, restrict local access to trusted users only to reduce risk. Monitor official Assimp project channels for updates or fixes addressing this issue.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-05-31T06:13:45.576Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a1cc54de29bf47b50721f2a
Added to database: 05/31/2026, 23:33:33 UTC
Last enriched: 06/08/2026, 20:46:41 UTC
Last updated: 07/31/2026, 19:22:57 UTC
Views: 123
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.