CVE-2026-117608
MEDIUM
NVD
CVSS Score
6.1
Severity
MEDIUM
Published
Oct 28, 2026
Vendor
unknown
Description
Assimp through 6.0.5 contains an integer overflow vulnerability in MD2Importer::ValidateHeader() that allows attackers to bypass frame table bounds checks using crafted header fields. Attackers can supply a malicious .md2 file whose numFrames and numVertices values wrap the 32-bit size check, causing heap out-of-bounds reads that crash applications or expose adjacent heap memory.