A flaw in the UV Channel Handler of Assimp’s FBXExporter can cause a divide‑by‑zero error when processing certain malformed data, leading to a crash of the exporter process and potential denial of service for applications that rely on this library. The weakness is a classic division by zero error as identified by CWE‑369 and an improper release of unmanaged resources (CWE‑404). The description does not indicate leakage of sensitive data or execution of arbitrary code, so the impact is limited to availability.

Assimp versions up to and including 6.0.4 are affected. The flaw resides in the FBXExporter component within the UV Channel Handler module. Applications that embed or depend on Assimp 6.0.4 or earlier for importing or exporting FBX files may experience crashes if they process specially crafted input files.

The CVSS score of 4.8 places this vulnerability in the moderate range. Since the attack vector is local, the threat is confined to environments where an attacker can run code on the same machine as the exporter. No EPSS score is available and the vulnerability is not listed in CISA’s KEV catalog, indicating limited public exploitation. Nonetheless, the crash could disrupt service continuity and should be treated as a service‑availability risk; applying the latest fix is the recommended response.