Use After Free Vulnerability in Assimp ASE File Parser by Assimp
CVE-2026-10232

4.8MEDIUM

Key Information:

Vendor: Assimp
Status: Assimp
Vendor: CVE Published:; 1 June 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-10232?

A vulnerability has been discovered in the Assimp library's ASE File Parser, specifically within the aiNode::~aiNode function found in scene.cpp. This flaw enables a use after free situation that can be exploited locally. Attackers can manipulate the system to leverage this weakness, potentially leading to unintended access and control. The exploit for this vulnerability has been publicly disclosed, indicating an increased risk for users running affected versions of the software. It is crucial for those utilizing Assimp to take preventive measures and update to the latest versions to mitigate this threat.

Affected Version(s)

Assimp 6.0.0

Assimp 6.0.1

Assimp 6.0.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-10232 - Proof of Concept