A heap-buffer-overflow vulnerability exists in the Assimp library's MD5MeshParser component, specifically in the MD5MeshParser constructor. This issue was reported by OSS-Fuzz and involves a read overflow on the heap during parsing of MD5 mesh files.