SEPTEMBER 19, 2026
Live Feed
Back to database
Case File

CVE-2026-19969

MEDIUM · CVSS 5.4 EPSS 0.29% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-17 · Last synced 2026-09-16

CyberRota Analysis

AI-Generated

A buffer overflow vulnerability exists in the Assimp library's MDLImporter function, potentially allowing remote exploitation. This issue affects unspecified products utilizing the 3DGS MDL7 Model Output Mesh Generator, and could lead to unauthorized access or system compromise. Organizations using affected versions of the Open Asset Import Library should prioritize patching this vulnerability to mitigate risks.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-19969
Severity
MEDIUM
CVSS
5.4
EPSS
0.29%

Original NVD Description

A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The manipulation leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.