CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,440 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,440
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product assimp:assimp. Show all products

13 CVEs, showing 1 to 13
CVESeverityTitlePublished
CVE-2026-111129Medium 5.5Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track
Assigned by VulnCheck
Oct 15, 2026
CVE-2026-111128Medium 5.5Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment
Assigned by VulnCheck
Oct 15, 2026
CVE-2026-108573Medium 5.5Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds
Assigned by VulDB
Oct 11, 2026
CVE-2026-82591Medium 5.3Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflow
Assigned by VulDB
Aug 30, 2026
CVE-2026-19999Medium 6.3Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow
Assigned by VulDB
Aug 17, 2026
CVE-2026-19970Medium 6.3Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow
Assigned by VulDB
Aug 17, 2026
CVE-2026-19969Medium 5.4Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow
Assigned by VulDB
Aug 17, 2026
CVE-2026-19968Medium 4.3Open Asset Import Library Assimp 3DGS MDL7 Model LWOLoader.h ReadFaces_3DGS_MDL7 heap-based overflow
Assigned by VulDB
Aug 17, 2026
CVE-2026-19967Medium 6.3Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow
Assigned by VulDB
Aug 17, 2026
CVE-2025-15538High 7.8A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2.Jan 18, 2026
CVE-2025-11277High 7.8A weakness has been identified in Open Asset Import Library Assimp 6.0.2.Oct 5, 2025
CVE-2025-11275High 7.8A vulnerability was identified in Open Asset Import Library Assimp 6.0.2.Oct 5, 2025
CVE-2025-11274Medium 5.5A vulnerability was determined in Open Asset Import Library Assimp 6.0.2.Oct 5, 2025

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.