CVE-2026-10201: Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero
A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
assimpto a version that resolves this vulnerability.Fixed in 6.0.4
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10201?
The severity of CVE-2026-10201 is rated low with a score of 3.3.
What impact does CVE-2026-10201 have on the Assimp software?
CVE-2026-10201 can lead to a divide by zero error in the UV Channel Handler when using the FBXExporter::WriteObjects function.
How is CVE-2026-10201 exploited?
CVE-2026-10201 requires local access to exploit the vulnerability.
What is the affected version of Assimp for CVE-2026-10201?
CVE-2026-10201 affects Assimp versions up to and including 6.0.4.
How do I fix CVE-2026-10201?
To mitigate CVE-2026-10201, update Assimp to a version later than 6.0.4.