Skip to main content
VulnerabilityPublished Updated

Assimp::MD5::MD5MeshParser::MD5MeshParser · Heap-buffer-overflow

Affects assimpSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 27 Oct 2026, 00:39 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzassimppkg:generic/assimpOther threatsAffected
  • master – v6.0.5
  • >=8012657169fdd503251b6694c12cdb32a85bdf6a
13 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, avoid processing untrusted MD5 mesh files with affected versions of Assimp.

Description

A heap-buffer-overflow vulnerability exists in the Assimp library's MD5MeshParser component, specifically in the MD5MeshParser constructor. This issue was reported by OSS-Fuzz and involves a read overflow on the heap during parsing of MD5 mesh files.

References

Community reviews

Loading reviews…