CVE-2026-10198 — Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference

Back Back to CVE browser

MEDIUM

Assimp glTFImporter glTFImporter.cpp ImportMeshes null pointer dereference

Published May 31, 2026

4.8

MEDIUM

CVSS 4.0

EPSS 0.11%

Description

A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFImporter. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been published and may be used. The project tagged the reported issue as bug.

Affected products

Vendor Assimp Product Assimp Default
n/a
- Version
  6.0.0
  Status
  affected
  Constraints
  -
- Version
  6.0.1
  Status
  affected
  Constraints
  -
- Version
  6.0.2
  Status
  affected
  Constraints
  -
- Version
  6.0.3
  Status
  affected
  Constraints
  -
- Version
  6.0.4
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Assimp

n/a

Version	Status	Constraints
6.0.0	affected	-
6.0.1	affected	-
6.0.2	affected	-
6.0.3	affected	-
6.0.4	affected	-

Red Hat Enterprise Linux 10

qt6-qtquick3d

Not affected
Red Hat Enterprise Linux 9

qt5-qt3d

Affected

Product	Package	State	Advisory
Red Hat Enterprise Linux 10	qt6-qtquick3d	Not affected	n/a
Red Hat Enterprise Linux 9	qt5-qt3d	Affected	n/a

Remediation

Red Hat statement

A Moderate impact null pointer dereference flaw was found in Assimp's glTFImporter component. This vulnerability allows a local attacker to trigger a denial of service by providing a specially crafted glTF file, causing applications utilizing Assimp to crash. The local nature of the attack limits its overall impact.

Red Hat mitigation

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

Metrics

0.11% 0.00113

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.00113

Score over time

Jun–Oct 2026

EPSS v4
EPSS v5

Percentile over time

EPSS v4
EPSS v5

Table of values (3 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	0.11% (0.00113)	1.32th	v5 (v2026.06.15)
Jun 15, 2026	0.11% (0.00113)	1.71th	v5 (v2026.06.15)
Jun 1, 2026	0.01% (0.00013)	2.27th	v4 (v2025.03.14)

Weaknesses (2)

CWE-404

Improper Resource Shutdown or Release

CWE-476

NULL Pointer Dereference

References (11)

https://access.redhat.com/security/cve/CVE-2026-10198
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2483754
Issue Tracking
https://github.com/assimp/assimp/
product
https://github.com/assimp/assimp/issues/6609
issue-tracking
https://github.com/user-attachments/files/27193865/poc.zip
exploit
https://nvd.nist.gov/vuln/detail/CVE-2026-10198
https://vuldb.com/cve/CVE-2026-10198
third-party-advisory
https://vuldb.com/submit/821178
third-party-advisory
https://vuldb.com/vuln/367478
vdb-entrytechnical-description
https://vuldb.com/vuln/367478/cti
signaturepermissions-required
https://www.cve.org/CVERecord?id=CVE-2026-10198

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2026-10198		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2483754		Issue Tracking
https://github.com/assimp/assimp/		product
https://github.com/assimp/assimp/issues/6609		issue-tracking
https://github.com/user-attachments/files/27193865/poc.zip		exploit
https://nvd.nist.gov/vuln/detail/CVE-2026-10198
https://vuldb.com/cve/CVE-2026-10198		third-party-advisory
https://vuldb.com/submit/821178		third-party-advisory
https://vuldb.com/vuln/367478		vdb-entrytechnical-description
https://vuldb.com/vuln/367478/cti		signaturepermissions-required
https://www.cve.org/CVERecord?id=CVE-2026-10198