CVE-2026-82591 | Open Asset Import Library Assimp up to 6.0.2 MD5Loader.cpp MakeDataUnique iNewIndex heap-based overflow (ID 6718)

August 30, 2026 Yanac

A vulnerability has been found in Open Asset Import Library Assimp up to 6.0.2 and classified as problematic. The impacted element is the function MD5Importer::MakeDataUnique of the file code/AssetLib/MD5/MD5Loader.cpp. The manipulation of the argument iNewIndex leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-82591. The attack can only be performed from a local environment. No exploit is available.

Applying a patch is the recommended action to fix this issue.VulDB Recent EntriesRead More