CVE-2026-108573: Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds
A vulnerability was detected in Open Asset Import Library Assimp up to 6.0.5. Affected by this vulnerability is the function IOStreamBuffer::getNextBlock of the component PLY File Handler. Performing a manipulation results in out-of-bounds read. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Open Asset Import Library Assimp versions up to 6.0.5 are affected when the PLY File Handler processes manipulated input. The issue can be initiated remotely.
What level of access does an attacker need?
The supplied severity vector indicates low privileges and user interaction are required. Exploitation involves manipulating PLY file input so that IOStreamBuffer::getNextBlock performs an out-of-bounds read.
What is the likely security impact?
The provided CVSS vector rates confidentiality, integrity, and availability impact as low. The issue is classified as an out-of-bounds read, despite the listed CWE being Buffer Overflow.
Is a vendor fix or response available?
No vendor response is reported in the available information. The vendor was contacted early about the disclosure but did not respond.