https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T19:01:24.539755+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-111129 fkie_cve-2026-111129 2026-10-17T19:01:24.541221+00:00

Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation track targeting a missing submesh or absent shared geometry to crash the host process.

 https://db.gcve.eu/vuln/ghsa-qvgc-x897-c3w7 GHSA-qvgc-x897-c3w7 2026-10-17T19:01:24.541279+00:00

Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation track targeting a missing submesh or absent shared geometry to crash the host process.

 https://db.gcve.eu/vuln/ubuntu-cve-2026-111129 UBUNTU-CVE-2026-111129 2026-10-17T19:01:24.541299+00:00

Affected: Ubuntu:16.04:LTS: assimp, Ubuntu:18.04:LTS: assimp, Ubuntu:20.04:LTS: assimp, Ubuntu:22.04:LTS: assimp, Ubuntu:24.04:LTS: assimp, Ubuntu:26.10: assimp, Ubuntu:26.04:LTS: assimp

Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation track targets. Attackers can supply a crafted .mesh file with a morph animation track targeting a missing submesh or absent shared geometry to crash the host process.