Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19970 Heap Buffer Overflow in Assimp Node Parser via MDLImporter Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19970
Post summary
The statement announces a heap buffer overflow vulnerability (CVE-2026-19970) affecting the Assimp MDLImporter parser, providing technical details but no evidence of exploitation or mitigation.