CVE-2026-14604: Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4. Affected is the function Assimp::Exporter::ExportToBlob of the file code/AssetLib/Ply/PlyLoader.cpp of the component PLY Model Handler. This manipulation causes double free. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-14604?
CVE-2026-14604 has a medium severity score of 6.3.
How do I fix CVE-2026-14604?
To fix CVE-2026-14604, update to the latest version of Open Asset Import Library Assimp beyond 6.0.4.
What is the impact of CVE-2026-14604 on systems using Assimp?
CVE-2026-14604 can lead to a double free vulnerability that may allow remote attacks.
Which component of Assimp is affected by CVE-2026-14604?
CVE-2026-14604 affects the PLY Model Handler component within Assimp.
Can CVE-2026-14604 be exploited remotely?
Yes, CVE-2026-14604 can be exploited remotely due to its nature as a double free vulnerability.