Skip to main content
VulnerabilityPublished Updated

Assimp::BVHLoader::ReadNodeChannels · Heap-use-after-free

Affects assimpSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Data as of 10 Nov 2026, 15:21 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzassimppkg:generic/assimpOther threatsAffected
  • >=16c50d7b53b5b6536599135004fb003c5e6f88b8
  • =v6.0.6
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

Description

A heap-use-after-free vulnerability was reported in the Assimp library version 6.0.6, specifically in the BVHLoader component's ReadNodeChannels function. This issue was identified by OSS-Fuzz and involves a read operation on memory that has already been freed.

References

Community reviews

Loading reviews…