CVE-2026-117608 Details
Description
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.
A heap out-of-bounds read vulnerability has been identified in Assimp versions through 6.0.5, specifically within the MD2Importer::ValidateHeader() function. This vulnerability arises from an integer overflow in the frame-table bounds check, which can be exploited by attackers using crafted .md2 files. The malicious files manipulate the numFrames and numVertices values to bypass size checks, leading to out-of-bounds memory access that can crash applications or expose sensitive heap data.
Users can upgrade to Assimp version 6.0.6 or later, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 28, 2026CISA-ADP
Assessed Nov 3, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/assimp/assimp/issues/6929 | CISA-ADP | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/assimp/assimp | [email protected] | Vendor |
| https://github.com/assimp/assimp/blob/v6.0.5/code/AssetLib/MD2/MD2Loader.cpp#L171-L176 | [email protected] | |
| https://github.com/assimp/assimp/commit/7dbc85d9218fae017d4fad70269e7569f7b0c870 | [email protected] | Source CodeVendor |
| https://github.com/assimp/assimp/issues/6929 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/assimp/assimp/pull/6963 | [email protected] | Issue TrackingVendor |
| https://www.vulncheck.com/advisories/assimp-through-6.0.5-heap-out-of-bounds-read-via-md2-importer-integer-overflow | [email protected] | Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-190 | Integer Overflow or Wraparound | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| assimp | <= 6.0.5 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 3, 2026 | CVE Modified | CISA-ADP |
| Oct 28, 2026 | New CVE Received | [email protected] |