CVE detail
CVE-2026-10200
A vulnerability was found in Assimp up to 6.0.4. This affects the function glTFCommon::CopyValue in the library glTFCommon.h of the component 4x4 Matrix Parser. Performing a manipulation results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been made public and could be used. The project tagged the reported issue as bug.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/367480/ctivuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 11:16 PM - https://vuldb.com/vuln/367480vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 11:16 PM - https://vuldb.com/submit/821180vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 11:16 PM - https://vuldb.com/cve/CVE-2026-10200vuldb.com
No excerpt available.
Exploitvuldb.comMay 31, 2026, 11:16 PM No excerpt available.
Exploitgithub.comMay 31, 2026, 11:16 PMNo excerpt available.
Exploitgithub.comMay 31, 2026, 11:16 PM- https://github.com/assimp/assimp/github.com
No excerpt available.
Exploitgithub.comMay 31, 2026, 11:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-15520CVSS 1.9 · Low
A vulnerability was determined in GNU LibreDWG 0.13.4-154-g0b573035. This impacts the function decompress_R2004_section of the file src/decode.c of the component R2004 Section Dec…
- CVE-2026-15506CVSS 7.1 · High
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. S…
- CVE-2026-15182CVSS 1.9 · Low
A vulnerability has been found in GNU LibreDWG up to 0.13.4. The affected element is the function dwg_bmp of the file src/dwg.c of the component BMP Image Handler. Such manipulati…
- CVE-2025-15668CVSS 1.9 · Low
A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_del_entry of the file src/isomedia/box_code_base.c of the component MP4Box. Such manip…
- CVE-2026-14759CVSS 1.9 · Low
A security flaw has been discovered in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the…
- CVE-2026-14610CVSS 1.9 · Low
A flaw has been found in Open Asset Import Library Assimp up to 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of…