Skip to main content
VulnerabilityPublished Updated

Assimp::SceneCombiner::CopyScene · Heap-buffer-overflow

Affects assimpSource GCVE Database

0
Severity
High

Rated High by Threat Radar's AI analysis

Data as of 27 Oct 2026, 00:40 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzassimppkg:generic/assimpOther threatsAffected
  • master – v6.0.5
  • >=9d6b32f5c5118e67e99d4be3087f49ad0b7660de
13 affected builds		Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, users should consider avoiding use of the affected versions or applying any vendor-provided workarounds.

Description

A heap-buffer-overflow vulnerability exists in the Assimp library within the SceneCombiner::CopyScene function, as reported by OSS-Fuzz. The issue occurs during scene copying operations and affects multiple versions of Assimp from 5.3.0 through 6.0.5. This vulnerability could lead to memory corruption when exporting scenes using Assimp's Export and ExportToBlob functions.

References

Community reviews

Loading reviews…