Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-08-17T00:45:14 assimp: Assimp: Denial of service via heap-based buffer overflow in 3DGS MDL7 Model Parser 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L CWE-120

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called ee77bb09a42a49843ac85ef64c14d2328b251df1. Applying a patch is advised to resolve this issue.

A flaw was found in Open Asset Import Library Assimp. A remote attacker could exploit a heap-based buffer overflow vulnerability in the `ReadFaces_3DGS_MDL7` function of the 3DGS MDL7 Model Parser by providing a specially crafted 3DGS MDL7 model file. This could lead to a denial of service.

This Moderate impact flaw in Assimp's 3DGS MDL7 Model Parser could lead to a denial of service. Exploitation requires a user to process a specially crafted 3DGS MDL7 model file, limiting the attack vector to scenarios involving untrusted input. To reduce the risk of exploitation, avoid processing untrusted 3DGS MDL7 model files with applications that use the Assimp library. Limiting the handling of such files to trusted sources is advised. Red Hat Enterprise Linux 10 Fix deferred qt6-qtquick3d Red Hat Enterprise Linux 9 Fix deferred qt5-qt3d https://www.cve.org/CVERecord?id=CVE-2026-19968 https://nvd.nist.gov/vuln/detail/CVE-2026-19968 https://github.com/assimp/assimp/commit/ee77bb09a42a49843ac85ef64c14d2328b251df1 https://github.com/assimp/assimp/issues/6630 https://github.com/assimp/assimp/pull/6717 https://github.com/user-attachments/files/27425090/poc.zip https://vuldb.com/cve/CVE-2026-19968 https://vuldb.com/submit/873129 https://vuldb.com/vuln/391145 https://vuldb.com/vuln/391145/cti