Technical impact
Assimp 6.0.6 contains a heap out‑of‑bounds read in glTFCommon::Util::ParseDataURI caused by an offset stored in a signed char. An attacker can supply a crafted glTF file with a raw data URI whose segment begins beyond byte 127, which may trigger an application crash or expose adjacent heap memory. The flaw is a classic read vulnerability that can lead to denial of service or inadvertent disclosure of memory contents, depending on the application context.
Affected Systems
The vulnerability applies to the Assimp library, version 6.0.6 and earlier. Any software that includes this release to load glTF models is at risk; this includes games, graphics editors, and other 3D asset pipelines that rely on Assimp.
Risk and Exploitability
With a CVSS score of 6.9 the issue is medium to high in severity. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV, indicating no publicly known exploits at this time. Exploitability requires an attacker to supply a malicious glTF file, making it a local or remote file‑type attack depending on the application’s trust model. Attackers can trigger crashes or potentially read sensitive data if the memory surrounding the accessed region is valuable.
