CVE-2026-10197 | Assimp up to 6.0.4 TF File glTF2Importer.cpp ImportEmbeddedTextures null pointer dereference (Issue 6608)

A vulnerability was found in Assimp up to 6.0.4 and classified as problematic. Affected is the function glTF2Importer::ImportEmbeddedTextures in the library code/AssetLib/glTF2/glTF2Importer.cpp of the component TF File Handler. The manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2026-10197. The attack is only possible with local access. Additionally, an exploit exists.

It is advisable to implement a patch to correct this issue.

The pull request to fix this issue awaits acceptance.