CVE-2026-19999 | Open Asset Import Library Assimp 17c12da 3DGS MDL7 Bone Transformation Key Parser MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 transmatrix_count/pcBoneTransforms buffer overflow (Issue 6633)

A vulnerability marked as critical has been reported in Open Asset Import Library Assimp Assimp 17c12da. The affected element is the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Bone Transformation Key Parser. The manipulation of the argument transmatrix_count/pcBoneTransforms leads to buffer overflow.

This vulnerability is traded as CVE-2026-19999. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.