Integer Overflow Vulnerability in Assimp MD2 Importer Allows Heap Out-of-Bounds Access

CVE-2026-117608

What is CVE-2026-117608?

The Assimp product up to version 6.0.5 is susceptible to an integer overflow vulnerability. This flaw exists within the MD2Importer::ValidateHeader() function, enabling attackers to manipulate crafted MD2 files for malicious purposes. By supplying malformed header fields, attackers can exploit this vulnerability to bypass critical frame table bounds checks. Specifically, crafted header values for numFrames and numVertices can trigger a wrap-around in the 32-bit size check, leading to potential heap out-of-bounds reads. Such exploitation can result in application crashes or unauthorized exposure of adjacent heap memory, posing significant security risks to systems utilizing this product.

References