CVE-2026-19969: Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes3DGSMDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-19969?
The severity of CVE-2026-19969 is rated as medium with a score of 5.4.
How does CVE-2026-19969 impact software?
CVE-2026-19969 results in a buffer overflow in the Assimp 3DGS MDL7 Model Output Mesh Generator which could lead to potential exploitation.
How do I fix CVE-2026-19969?
To mitigate CVE-2026-19969, update to the latest version of the Open Asset Import Library Assimp that addresses this vulnerability.
What are the risks associated with CVE-2026-19969?
The risks associated with CVE-2026-19969 include potential application crashes and execution of arbitrary code due to buffer overflow.
Is CVE-2026-19969 easily exploitable?
CVE-2026-19969 may be exploitable under certain conditions as it requires specific manipulation of the 3DGS MDL7 model files.