Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Assimp can crash when processing some STEP files
published 5 months ago
Summary
The Assimp library, which handles 3D model files, may stop working if it reads certain STEP format files. This occurs because the program misinterprets internal data, leading to a crash. Update Assimp to the latest version or avoid loading the problematic STEP files until the fix is applied.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | assimp | All versions |
Original advisory text
Bad-cast to std::__shared_weak_count from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546
```
Crash type: Bad-cast
Crash state:
Bad-cast to std::__shared_weak_count from invalid vptr
std::__1::shared_ptr<Assimp::STEP::EXPRESS::DataType const>::shared_ptr
Assimp::STEP::ReadFileHeader
```
```
Crash type: Bad-cast
Crash state:
Bad-cast to std::__shared_weak_count from invalid vptr
std::__1::shared_ptr<Assimp::STEP::EXPRESS::DataType const>::shared_ptr
Assimp::STEP::ReadFileHeader
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=520147546 Third Party Advisory
Timeline
Published7 Jun 2026
Updated13 Oct 2026
First seen13 Oct 2026
Sources
OSV-2026-867 · OSV
Track software like this
Free during beta