The vulnerability is a heap-based buffer overflow in the glTF 4x4 matrix parser within Assimp, located in glTFCommon::CopyValue. Manipulating the parser leads to uncontrolled writes on the heap, which an attacker with local privileges can use to corrupt memory, crash the application, or potentially execute arbitrary code. The issue exists in all releases up to 6.0.4 and requires the attacker to supply a malicious glTF file that triggers the overflow during parsing.

Assimp, the open‑source 3D model import library, runs in scopes ranging from game engines to 3D rendering tools. Any instance that links against a vulnerable Assimp binary or directly uses the glTFCommon component is at risk. Systems that execute Assimp with elevated privileges or accept untrusted glTF input fall into the most vulnerable category.

The CVSS score of 4.8 reflects moderate severity. The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating limited or no widespread exploitation yet. However, the publicly available proof‑of‑concept and the open issue confirm that the flaw can be exercised by local users. In contexts where the application runs with elevated permissions or processes untrusted data, the risk escalates to potential arbitrary code execution. The exploitation path involves delivering a crafted glTF file to the parser, which currently lacks proper bounds checking for the 4x4 matrix data.