{ "document":{ "aggregate_severity":{ "namespace":"https://nvd.nist.gov/vuln-metrics/cvss", "text":"LOW" }, "category":"csaf_vex", "csaf_version":"2.0", "distribution":{ "tlp":{ "label":"WHITE", "url":"https:/www.first.org/tlp/" } }, "lang":"en", "notes":[ { "text":"A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Remote exploitation of the attack is possible, impacting integrity and availability. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "category":"general", "title":"Synopsis" } ], "publisher":null, "references":[ { "summary":"nvd cve", "category":"external", "url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19969" }, { "summary":"CVE-2026-19969 vex file", "category":"self", "url":"https://repo.openeuler.org/security/data/csaf/cve/2026/csaf-openeuler-cve-2026-19969.json" }, { "summary":"openEuler-SA-2026-4449", "category":"self", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4449" }, { "summary":"CVE-2026-19969", "category":"self", "url":"https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-19969&packageName=assimp" } ], "title":"openEuler cve CVE-2026-19969", "tracking":{ "initial_release_date":"2026-10-30T11:17:11+08:00", "revision_history":[ { "date":"2026-10-30T11:17:11+08:00", "summary":"Initial", "number":"1.0.0" } ], "generator":{ "date":"2026-10-30T11:17:11+08:00", "engine":{ "name":"openEuler CSAF Tool V1.0" } }, "current_release_date":"2026-10-30T11:17:11+08:00", "id":"CVE-2026-19969", "version":"1.0.0", "status":"interim" } }, "product_tree":{ "branches":[ { "name":"openEuler", "category":"vendor", "branches":[ { "name":"openEuler", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"openEuler-24.03-LTS-SP3", "name":"openEuler-24.03-LTS-SP3" }, "name":"openEuler-24.03-LTS-SP3", "category":"product_version" } ], "category":"product_name" }, { "name":"x86_64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-5.3.1-24.oe2403sp3.x86_64.rpm", "name":"assimp-5.3.1-24.oe2403sp3.x86_64.rpm" }, "name":"assimp-5.3.1-24.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64.rpm", "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64.rpm" }, "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-debugsource-5.3.1-24.oe2403sp3.x86_64.rpm", "name":"assimp-debugsource-5.3.1-24.oe2403sp3.x86_64.rpm" }, "name":"assimp-debugsource-5.3.1-24.oe2403sp3.x86_64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-devel-5.3.1-24.oe2403sp3.x86_64.rpm", "name":"assimp-devel-5.3.1-24.oe2403sp3.x86_64.rpm" }, "name":"assimp-devel-5.3.1-24.oe2403sp3.x86_64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"noarch", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-help-5.3.1-24.oe2403sp3.noarch.rpm", "name":"assimp-help-5.3.1-24.oe2403sp3.noarch.rpm" }, "name":"assimp-help-5.3.1-24.oe2403sp3.noarch.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"python3-assimp-5.3.1-24.oe2403sp3.noarch.rpm", "name":"python3-assimp-5.3.1-24.oe2403sp3.noarch.rpm" }, "name":"python3-assimp-5.3.1-24.oe2403sp3.noarch.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"aarch64", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-5.3.1-24.oe2403sp3.aarch64.rpm", "name":"assimp-5.3.1-24.oe2403sp3.aarch64.rpm" }, "name":"assimp-5.3.1-24.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64.rpm", "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64.rpm" }, "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-debugsource-5.3.1-24.oe2403sp3.aarch64.rpm", "name":"assimp-debugsource-5.3.1-24.oe2403sp3.aarch64.rpm" }, "name":"assimp-debugsource-5.3.1-24.oe2403sp3.aarch64.rpm", "category":"product_version" }, { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-devel-5.3.1-24.oe2403sp3.aarch64.rpm", "name":"assimp-devel-5.3.1-24.oe2403sp3.aarch64.rpm" }, "name":"assimp-devel-5.3.1-24.oe2403sp3.aarch64.rpm", "category":"product_version" } ], "category":"architecture" }, { "name":"src", "branches":[ { "product":{ "product_identification_helper":{ "cpe":"cpe:/a:openEuler:openEuler:24.03-LTS-SP3" }, "product_id":"assimp-5.3.1-24.oe2403sp3.src.rpm", "name":"assimp-5.3.1-24.oe2403sp3.src.rpm" }, "name":"assimp-5.3.1-24.oe2403sp3.src.rpm", "category":"product_version" } ], "category":"architecture" } ] } ], "relationships":[ { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-5.3.1-24.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.x86_64", "name":"assimp-5.3.1-24.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64", "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-debugsource-5.3.1-24.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.x86_64", "name":"assimp-debugsource-5.3.1-24.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-devel-5.3.1-24.oe2403sp3.x86_64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.x86_64", "name":"assimp-devel-5.3.1-24.oe2403sp3.x86_64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-help-5.3.1-24.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-help-5.3.1-24.oe2403sp3.noarch", "name":"assimp-help-5.3.1-24.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"python3-assimp-5.3.1-24.oe2403sp3.noarch.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:python3-assimp-5.3.1-24.oe2403sp3.noarch", "name":"python3-assimp-5.3.1-24.oe2403sp3.noarch as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-5.3.1-24.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.aarch64", "name":"assimp-5.3.1-24.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64", "name":"assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-debugsource-5.3.1-24.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.aarch64", "name":"assimp-debugsource-5.3.1-24.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-devel-5.3.1-24.oe2403sp3.aarch64.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.aarch64", "name":"assimp-devel-5.3.1-24.oe2403sp3.aarch64 as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" }, { "relates_to_product_reference":"openEuler-24.03-LTS-SP3", "product_reference":"assimp-5.3.1-24.oe2403sp3.src.rpm", "full_product_name":{ "product_id":"openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.src", "name":"assimp-5.3.1-24.oe2403sp3.src as a component of openEuler-24.03-LTS-SP3" }, "category":"default_component_of" } ] }, "vulnerabilities":[ { "cve":"CVE-2026-19969", "notes":[ { "text":"A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da. The impacted element is the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component 3DGS MDL7 Model Output Mesh Generator. The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow. Remote exploitation of the attack is possible, impacting integrity and availability. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.", "category":"description", "title":"Vulnerability Description" } ], "product_status":{ "fixed":[ "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-help-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:python3-assimp-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.src" ] }, "remediations":[ { "product_ids":[ "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-help-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:python3-assimp-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.src" ], "details":"assimp security update", "category":"vendor_fix", "url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4449" } ], "scores":[ { "cvss_v3":{ "baseSeverity":"LOW", "baseScore":2.1, "vectorString":"CVSS:3.1/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version":"3.1" }, "products":[ "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.x86_64", "openEuler-24.03-LTS-SP3:assimp-help-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:python3-assimp-5.3.1-24.oe2403sp3.noarch", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debuginfo-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-debugsource-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-devel-5.3.1-24.oe2403sp3.aarch64", "openEuler-24.03-LTS-SP3:assimp-5.3.1-24.oe2403sp3.src" ] } ], "threats":[ { "details":"Low", "category":"impact" } ], "title":"CVE-2026-19969" } ] }