Skip to main content
VulnerabilityPublished Updated

Assimp::LWOImporter::LoadLWO2TextureHeader · Heap-buffer-overflow

Affects assimpSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 10 Nov 2026, 15:21 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzassimppkg:generic/assimpOther threatsAffected
  • >=16c50d7b53b5b6536599135004fb003c5e6f88b8
  • =v6.0.6
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users of Assimp version 6.0.6 should monitor the vendor or OSS-Fuzz advisories for updates and apply any forthcoming patches promptly. Until a fix is available, avoid processing untrusted LWO files with this version.

Description

A heap-buffer-overflow vulnerability exists in Assimp version 6.0.6 within the LWOImporter component, specifically in the LoadLWO2TextureHeader function. This issue was reported by OSS-Fuzz and involves reading beyond the allocated heap buffer, which can cause a crash.

References

Community reviews

Loading reviews…