Skip to content
Heist/ feed
Unrated

UNKNOWN READ in unsigned long Assimp::StreamReader::Get

Type: advisorySource: OSV1 source record

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 ``` Crash type: UNKNOWN READ Crash state: unsigned long Assimp::StreamReader::Get bool Assimp::Blender::Structure::ResolvePointer

Announced Source revision 1
Original source ↗

OSV-2026-521

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:OSV-2026-521

assimp

Source reference: /affected/0/package/name

Affected versions
master

Source reference: /affected/0/versions

v6.0.3

Source reference: /affected/0/versions

v6.0.4

Source reference: /affected/0/versions

v6.0.5

Source reference: /affected/0/versions

Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "repo": "https://github.com/assimp/assimp.git",
        "type": "GIT",
        "events": [
          {
            "introduced": "72b9939b9f5a34d155b5b11b61f4474f1176d51a"
          },
          {
            "introduced": "fee5c267e764abaacbf8de6a764da6ca7a0292bd"
          },
          {
            "fixed": "3fddcfcc05ee6073853a01d6f133e01f3d9743c7"
          }
        ]
      }
    ],
    "package": {
      "name": "assimp",
      "purl": "pkg:generic/assimp",
      "ecosystem": "OSS-Fuzz"
    },
    "versions": [
      "master",
      "v6.0.3",
      "v6.0.4",
      "v6.0.5"
    ],
    "database_specific": {
      "source": "https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2026-521.yaml",
      "fixed_range": "a4eff9f89585c590d7b43daf5065f7bdf398bbc6:3fddcfcc05ee6073853a01d6f133e01f3d9743c7",
      "introduced_range": "4c8a3bd39c449eba1b07f81fd4177ad938a7fd93:69f8eb21fd1da5688523986cc911346c333806c2"
    },
    "ecosystem_specific": {
      "severity": "MEDIUM"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#13810 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement