OSV-2026-1049

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1049.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2026-1049

Published

2026-07-10T00:02:19Z

Modified

2026-07-10T00:02:19Z

Summary

Heap-buffer-overflow in Assimp::X3DExporter::CheckAndExport_Light

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=532625491

Crash type: Heap-buffer-overflow READ 8
Crash state:
Assimp::X3DExporter::CheckAndExport_Light
Assimp::X3DExporter::Export_Node
Assimp::X3DExporter::X3DExporter

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=532625491

Affected packages

OSS-Fuzz / assimp

Package

Name: assimp
Purl: pkg:generic/assimp

Affected ranges

Type: GIT
Repo: https://github.com/assimp/assimp.git
Events: Introduced

16c50d7b53b5b6536599135004fb003c5e6f88b8

Fixed

3fddcfcc05ee6073853a01d6f133e01f3d9743c7

Ecosystem specific

{
    "severity":  "MEDIUM"
}

Database specific

introduced_range

"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122"

source

"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1049.yaml"