https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T23:32:02.918629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-244311 EUVD-2026-244311 2026-10-06T23:32:02.921809+00:00 EUVD-2026-244311 https://cve.radiocsirt.org/vuln/fkie_cve-2025-6119 fkie_cve-2025-6119 2026-10-06T23:32:02.921848+00:00

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.

 https://cve.radiocsirt.org/vuln/ghsa-j5pj-crp5-jh57 GHSA-j5pj-crp5-jh57 2026-10-06T23:32:02.921884+00:00

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-6119 UBUNTU-CVE-2025-6119 2026-10-06T23:32:02.921903+00:00

Affected: Ubuntu:16.04:LTS: assimp, Ubuntu:18.04:LTS: assimp, Ubuntu:20.04:LTS: assimp, Ubuntu:22.04:LTS: assimp, Ubuntu:24.04:LTS: assimp, Ubuntu:25.10: assimp, Ubuntu:26.04:LTS: assimp

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.