Assimp glTF2Asset.h LazyDict null pointer dereference
Published May 31, 2026
4.8
MEDIUMCVSS 4.0
EPSS 0.12%
Description
A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operator[] leads to null pointer dereference. The attack must be carried out locally. The exploit has been disclosed to the public and may be used. The name of the patch is d24b85319bd70c65883a2b96613e07e23fb95981. It is best practice to apply a patch to resolve this issue.
Affected products
-
- Version 6.0.0StatusaffectedConstraints-
- Version 6.0.1StatusaffectedConstraints-
- Version 6.0.2StatusaffectedConstraints-
- Version 6.0.3StatusaffectedConstraints-
- Version 6.0.4StatusaffectedConstraints-
- Version
No data.
No data.
Red Hat Enterprise Linux 10
qt6-qtquick3d
Not affected
Red Hat Enterprise Linux 9
qt5-qt3d
Affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | qt6-qtquick3d | Not affected | n/a |
| Red Hat Enterprise Linux 9 | qt5-qt3d | Affected | n/a |
No package ranges for this CVE.
Remediation
Red Hat statement
Moderate: A null pointer dereference flaw was identified in Assimp, affecting the glTF2::LazyDict function. This vulnerability requires local access and could allow an attacker to cause an application crash, leading to a denial of service.
Red Hat mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
Metrics
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
1 other source (NVD) ▾
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
2 other sources (CVE.org, NVD) ▾
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C
AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:OF/RC:C
1 other source (NVD) ▾
AV:L/AC:L/Au:S/C:N/I:N/A:P
This CVE is not in the KEV list.
CISA SSVC (Vulnrichment)
Stakeholder-Specific Vulnerability Categorization from CISA ADP.
Exploitation
PoCAutomatable
NoTechnical Impact
PartialDecision
n/aAssessed Jun 1, 2026 · SSVC 2.0.3
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.
Score over time
Jun–Oct 2026- EPSS v4
- EPSS v5
Percentile over time
- EPSS v4
- EPSS v5
Table of values (3 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 2, 2026 | 0.12% (0.00118) | 1.56th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.12% (0.00118) | 2.01th | v5 (v2026.06.15) |
| Jun 1, 2026 | 0.01% (0.00012) | 1.93th | v4 (v2025.03.14) |
References (13)
- https://access.redhat.com/security/cve/CVE-2026-10199 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2483753 Issue Tracking
- https://github.com/assimp/assimp/ product
- https://github.com/assimp/assimp/commit/d24b85319bd70c65883a2b96613e07e23fb95981 patch
- https://github.com/assimp/assimp/issues/6611 issue-tracking
- https://github.com/assimp/assimp/pull/6646 issue-trackingpatch
- https://github.com/user-attachments/files/27194148/poc.zip exploit
- https://nvd.nist.gov/vuln/detail/CVE-2026-10199
- https://vuldb.com/cve/CVE-2026-10199 third-party-advisory
- https://vuldb.com/submit/821179 third-party-advisory
- https://vuldb.com/vuln/367479 vdb-entrytechnical-description
- https://vuldb.com/vuln/367479/cti signaturepermissions-required
- https://www.cve.org/CVERecord?id=CVE-2026-10199
| Link | Providers | Tags |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2026-10199 | Vendor Advisory | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2483753 | Issue Tracking | |
| https://github.com/assimp/assimp/ | product | |
| https://github.com/assimp/assimp/commit/d24b85319bd70c65883a2b96613e07e23fb95981 | patch | |
| https://github.com/assimp/assimp/issues/6611 | issue-tracking | |
| https://github.com/assimp/assimp/pull/6646 | issue-trackingpatch | |
| https://github.com/user-attachments/files/27194148/poc.zip | exploit | |
| https://nvd.nist.gov/vuln/detail/CVE-2026-10199 | ||
| https://vuldb.com/cve/CVE-2026-10199 | third-party-advisory | |
| https://vuldb.com/submit/821179 | third-party-advisory | |
| https://vuldb.com/vuln/367479 | vdb-entrytechnical-description | |
| https://vuldb.com/vuln/367479/cti | signaturepermissions-required | |
| https://www.cve.org/CVERecord?id=CVE-2026-10199 |
Change history (0)
No recorded changes yet.