CVE-2026-19999

A security vulnerability has been detected in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulation of the argument transmatrix_count/pcBoneTransforms leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is 50d767984e78d51b53e2020fdf0967fd624bc377. It is recommended to apply a patch to fix this issue.

• CWE-119
• CWE-120

• https://github.com/assimp/assimp/commit/50d767984e78d51b53e2020fdf0967fd624bc377
• https://github.com/assimp/assimp/issues/6633
• https://github.com/assimp/assimp/pull/6759
• https://github.com/user-attachments/files/27429337/poc.zip
• https://vuldb.com/cve/CVE-2026-19999
• https://vuldb.com/submit/873132
• https://vuldb.com/vuln/391200
• https://vuldb.com/vuln/391200/cti
• https://github.com/assimp/assimp/issues/6633

Published

Aug 17, 2026

Last Modified

Aug 20, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-19993A vulnerability has been found in Webkul Bagisto up to 2.4.4…4.3
• CVE-2026-19994A vulnerability was found in Webkul Bagisto up to 2.4.4. Aff…6.3
• CVE-2026-19995A vulnerability was determined in Webkul Bagisto up to 2.4.4…3.5
• CVE-2026-19996A vulnerability was identified in Webkul Bagisto up to 2.4.4…4.3
• CVE-2026-19997A security flaw has been discovered in Webkul Bagisto up to …4.7
• CVE-2026-19998A weakness has been identified in code-projects Online Shopp…4.3
• CVE-2026-2000A vulnerability was found in DCN DCME-320 up to 20260121. Im…7.2
• CVE-2026-20000A vulnerability was detected in itsourcecode Hospital Manage…6.3
• CVE-2026-20001A vulnerability in the REST API of Cisco Secure FMC Software…6.5
• CVE-2026-20002A vulnerability in the web-based management interface of Cis…8.1
• CVE-2026-20003A vulnerability in the REST API of Cisco Secure FMC Software…4.9
• CVE-2026-20004A vulnerability in the TLS library of Cisco IOS XE Software …7.4