Skip to main content
VulnerabilityPublished Updated

signed char Assimp::StreamReader<false, false>::Get<signed char> · UNKNOWN READ

Affects assimpSource GCVE Database

0
Severity
Medium

Rated Medium by Threat Radar's AI analysis

Patch
Available – fixed in 11a5d1b8ef2018d0eb765ef1ddae95a13a8b59b6

Data as of 27 Oct 2026, 00:23 UTC

What to do

Upgrade assimp to 11a5d1b8ef2018d0eb765ef1ddae95a13a8b59b6.

Affected software

ProductAffectedFixed in
OSS-Fuzzassimppkg:generic/assimpOther threatsAffected
  • master – v6.0.4
  • >=47ef79672e58417899a3dbf1361691059e9f5dd8 <11a5d1b8ef2018d0eb765ef1ddae95a13a8b59b6
9 affected builds		Fixed in
  • 11a5d1b8ef2018d0eb765ef1ddae95a13a8b59b6

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and has been committed to the Assimp source repository. Users should upgrade to the fixed version identified by commit 11a5d1b8ef2018d0eb765ef1ddae95a13a8b59b6 to remediate this issue.

Description

A vulnerability in the Assimp library versions 5.4.1 through 6.0.4 causes an UNKNOWN READ crash in the function Assimp::StreamReader<false, false>::Get<signed char>, triggered during binary file reading in the COB importer. This issue was identified by OSS-Fuzz and has been fixed in a later commit.

References

Community reviews

Loading reviews…