CVE-2026-14610 | Open Asset Import Library Assimp up to 6.0.5 CSM File CSMLoader.cpp InternReadFile heap-based overflow (Issue 6622)

A vulnerability was found in Open Asset Import Library Assimp up to 6.0.5. It has been rated as critical. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. This manipulation causes heap-based buffer overflow.

This vulnerability is tracked as CVE-2026-14610. The attack is restricted to local execution. Moreover, an exploit is present.

Applying a patch is the recommended action to fix this issue.