


Perceptive Security
SOC/SIEM Consultancy

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method
Published:
3 mei 2026 om 22:00:00
Alert date:
4 mei 2026 om 19:04:04
Source:
nvd.nist.gov
Supply Chain & Dependencies
A denial of service vulnerability was discovered in Assimp version 6.0.2, specifically in the FBXConverter.cpp file within the ConvertMeshMultiMaterial() method. The vulnerability allows remote attackers to cause a denial of service condition. Assimp is a widely-used library for importing various 3D asset formats. The issue affects the FBX file format converter component of the library. A proof-of-concept exploit has been made available on GitHub.
Technical details
Mitigation steps:
Affected products:
Assimp
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2025-70069
http://assimp.com
https://gist.github.com/GunP4ng/9080ae7f0470c889a59cc3bfca445223
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
