Vulnerability Description
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://github.com/assimp/assimp
- https://github.com/assimp/assimp/blob/v6.0.5/code/AssetLib/MD2/MD2Loader.cpp#L17
- https://github.com/assimp/assimp/commit/7dbc85d9218fae017d4fad70269e7569f7b0c870
- https://github.com/assimp/assimp/issues/6929
- https://github.com/assimp/assimp/pull/6963
- https://www.vulncheck.com/advisories/assimp-through-6.0.5-heap-out-of-bounds-rea
FAQ
What is CVE-2026-117608?
CVE-2026-117608 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can su...
How severe is CVE-2026-117608?
CVE-2026-117608 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-117608?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.