CVE-2026-10200Active Exploitation

MEDIUMCVSS 1.9 · LOW

Exploitation ongoing with high activity in latest observed window (2 mentions)

Immediate actions

  • Patch affected systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The project tagged the reported issue as bug.

4.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-119CWE-122

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-06-01: 2Active Exploitation · 2026-06-01: 1Patch / Workaround · 2026-06-01: 1Technical Details · 2026-06-01: 206-01
Signal classification2 categories
Active Exploitation
150.0%
General
150.0%
Referenced assets1 URL
By indicator
Full discourse2 posts
  • NerdieNews@NewsNerdie
    Active Exploitation

    CVE-2026-10200 in Assimp is under active exploitation, allowing attackers to execute arbitrary code via heap-based overflow in glTFCommon. Patch immediately to prevent further breaches. #NerdieNews #CyberSecurity #Ransomware https://t.co/KaGXNbz82U

    Post summary

    CVE-2026-10200 in Assimp is actively exploited via a heap-based overflow enabling arbitrary code execution, prompting urgent patching to mitigate the threat.

    0000037
    65 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-10200 Heap-Based Buffer Overflow in Assimp glTFCommon 4x4 Matrix Parser Up to 6.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-10200

    Post summary

    The text references CVE-2026-10200, detailing a heap-based buffer overflow in Assimp's glTFCommon parser up to v6.0.4, but contains no PoC, exploit code, active exploitation claims, patches, or debunking information.

    0000059
    4.0K followersView on X

Explore more