CVE-2026-10201

LowCVSS 3.3

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.11%

2th percentile - higher than 2% of all known CVEs

Summary

In Assimp up to 6.0.4, the FBXExporter::WriteObjects function has a divide-by-zero vulnerability. Local access required; exploit public.

Risk Assessment

Local exploitation may crash the application, causing denial of service.

Recommendation

Apply the patch or upgrade Assimp to a fixed version.

Original NVD description (English source)

A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.