GHSA-rc6p-2pj8-p4v9
A heap-based buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) up to version 6.0.5, specifically in the function Assimp::CSMImporter::InternReadFile within the CSM File Handler component. The flaw allows local attackers to manipulate the function, potentially causing memory corruption. An exploit has been published, but the attack requires local access. A patch has been identified by its commit hash, and applying it is recommended to remediate the issue.
AI Analysis
Technical Summary
The vulnerability is a heap-based buffer overflow in Assimp's CSM File Handler component, affecting the InternReadFile function in the file code/AssetLib/CSM/CSMLoader.cpp. This flaw is present in versions up to 6.0.5 and can be exploited by a local attacker to cause memory corruption. The exploit has been publicly disclosed. The patch identified by commit eb84eec580d3f4ba2f0fd87409b7d0744620f11e addresses this issue.
Potential Impact
Successful exploitation of this vulnerability could lead to heap-based buffer overflow, which may cause application crashes or potentially allow execution of arbitrary code. However, the attack requires local access and no user interaction is needed. The overall severity is assessed as low.
Mitigation Recommendations
A patch identified by commit eb84eec580d3f4ba2f0fd87409b7d0744620f11e is available and should be applied to remediate this vulnerability. Applying this patch is the recommended action. No additional mitigations are specified.
GHSA-rc6p-2pj8-p4v9
Description
A heap-based buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) up to version 6.0.5, specifically in the function Assimp::CSMImporter::InternReadFile within the CSM File Handler component. The flaw allows local attackers to manipulate the function, potentially causing memory corruption. An exploit has been published, but the attack requires local access. A patch has been identified by its commit hash, and applying it is recommended to remediate the issue.
CVSS v4.0
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability is a heap-based buffer overflow in Assimp's CSM File Handler component, affecting the InternReadFile function in the file code/AssetLib/CSM/CSMLoader.cpp. This flaw is present in versions up to 6.0.5 and can be exploited by a local attacker to cause memory corruption. The exploit has been publicly disclosed. The patch identified by commit eb84eec580d3f4ba2f0fd87409b7d0744620f11e addresses this issue.
Potential Impact
Successful exploitation of this vulnerability could lead to heap-based buffer overflow, which may cause application crashes or potentially allow execution of arbitrary code. However, the attack requires local access and no user interaction is needed. The overall severity is assessed as low.
Mitigation Recommendations
A patch identified by commit eb84eec580d3f4ba2f0fd87409b7d0744620f11e is available and should be applied to remediate this vulnerability. Applying this patch is the recommended action. No additional mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-rc6p-2pj8-p4v9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-14610"]
- Ecosystems
- []
- Database Specific Severity
- LOW
- Cvss Version
- 4.0
Threat ID: 6a483c9527e9c79719d7e4d2
Added to database: 07/03/2026, 22:49:57 UTC
Last enriched: 07/03/2026, 22:54:04 UTC
Last updated: 07/04/2026, 02:50:11 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.