OSV-2026-1077

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1077.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-1077
Published
2026-07-28T07:23:02Z
Modified
2026-10-20T12:16:28Z
Summary
Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=536937906

Crash type: Heap-buffer-overflow READ {*}
Crash state:
std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
Assimp::XFileParser::GetNextToken
Assimp::XFileParser::ParseDataObjectTemplate
References

Affected packages

OSS-Fuzz / assimp

Package

Name
assimp
Purl
pkg:generic/assimp

Affected ranges

Type
GIT
Repo
https://github.com/assimp/assimp.git
Events
Introduced
16c50d7b53b5b6536599135004fb003c5e6f88b8

Ecosystem specific 

{
    "severity":  "MEDIUM"
}

Database specific

introduced_range 
"e86df1f8b139f4095653d37dc08622fa5d206663:e2fd15f8f78d99e08fd3d3f90d7add3bf310b122"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-1077.yaml"