CVE-2026-14604 is a double free vulnerability in the Open Asset Import Library Assimp affecting versions 6.0.0 through 6.0.4. The flaw resides in the function Assimp::Exporter::ExportToBlob in the file code/AssetLib/Ply/PlyLoader.cpp, specifically within the PLY Model Handler component. This vulnerability allows remote attackers to cause a double free condition, potentially leading to memory corruption or application instability. The vulnerability was responsibly disclosed to the project early via an issue report and has been publicly disclosed. No official patch or remediation level has been provided in the available data.

The vulnerability can be exploited remotely to cause a double free condition, which may result in memory corruption, application crashes, or potential denial of service. The CVSS 4.0 score of 5.3 indicates a medium severity impact with low attack complexity and no user interaction required. There is no indication of known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor the Open Asset Import Library project for updates. Until a patch is available, avoid processing untrusted PLY model files with affected versions of Assimp to reduce risk.