CVE-2026-19968

A weakness has been identified in Open Asset Import Library Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ReadFaces_3DGS_MDL7 in the library code/AssetLib/LWO/LWOLoader.h of the component 3DGS MDL7 Model Parser. Executing a manipulation can lead to heap-based buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be used for attacks. This patch is called ee77bb09a42a49843ac85ef64c14d2328b251df1. Applying a patch is advised to resolve this issue.

• CWE-119
• CWE-122

• https://github.com/assimp/assimp/commit/ee77bb09a42a49843ac85ef64c14d2328b251df1
• https://github.com/assimp/assimp/issues/6630
• https://github.com/assimp/assimp/pull/6717
• https://github.com/user-attachments/files/27425090/poc.zip
• https://vuldb.com/cve/CVE-2026-19968
• https://vuldb.com/submit/873129
• https://vuldb.com/vuln/391145
• https://vuldb.com/vuln/391145/cti

Published

Aug 17, 2026

Last Modified

Aug 20, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19962A flaw has been found in Edimax EW-7478APC 1.04. Affected by…7.4
• CVE-2026-19963A vulnerability has been found in Edimax EW-7478APC 1.04. Af…7.4
• CVE-2026-19964A vulnerability was found in Jij-Inc Jij-MCP-Server 0.1.0. T…5.5
• CVE-2026-19965A vulnerability was determined in automad up to 2.0.0-beta.3…3.7
• CVE-2026-19966A vulnerability was identified in CodeCanyon TimeCamp Integr…5.4
• CVE-2026-19967A security flaw has been discovered in Open Asset Import Lib…6.3
• CVE-2026-19969A security vulnerability has been detected in Open Asset Imp…5.4
• CVE-2026-1997Certain HP OfficeJet Pro printers may expose information if …5.3
• CVE-2026-19970A vulnerability was detected in Open Asset Import Library As…6.3
• CVE-2026-19971A flaw has been found in LB-Link WR1210M 1.0.3. This impacts…4.7
• CVE-2026-19972A vulnerability has been found in itsourcecode Hospital Mana…6.3
• CVE-2026-19973A vulnerability was found in itsourcecode Hospital Managemen…6.3