CVE-2026-10232
Medium · 5.3CVSS
5.3
EPSS
0.1%
Published
Jun 1, 2026
CISA due date
—
The record
A weakness has been identified in Assimp up to 6.0.4. Affected by this vulnerability is the function aiNode::~aiNode of the file scene.cpp of the component ASE File Parser. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. The project tagged the reported issue as bug.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | assimp | 0 | 6.0.5-4.1 |
Related vulnerabilities
- CVE-2026-10199 A vulnerability has been found in Assimp up to 6.0.4. Also affects assimp
- CVE-2026-10200 A vulnerability was found in Assimp up to 6.0.4. Also affects assimp
- CVE-2026-10197 A vulnerability was detected in Assimp up to 6.0.4. Also affects assimp
- CVE-2025-70067 Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. Also affects assimp
- CVE-2024-53425 A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function… Also affects assimp
- CVE-2024-48424 A heap-buffer-overflow vulnerability has been identified in the… Also affects assimp
- CVE-2024-48425 A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle… Also affects assimp
- CVE-2024-48426 A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in… Also affects assimp