CVE-2026-129479 | Assimp up to 6.0.6 OgreBinarySerializer ReadSubMesh integer overflow (EUVD-2026-126028)

November 15, 2026 Yanac

A vulnerability was found in Assimp up to 6.0.6 and classified as problematic. This impacts the function OgreBinarySerializer::ReadSubMesh of the component OgreBinarySerializer. The manipulation results in integer overflow.

This vulnerability is known as CVE-2026-129479. Attacking locally is a requirement. No exploit is available.VulDB Recent EntriesRead More