CVE-2026-10201CWE-369CWE-404

Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero

Medium · published May 31, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
1.3
In the wild
Unconfirmed
What it is

A vulnerability was determined in Assimp up to 6.0.4. This vulnerability affects the function FBXExporter::WriteObjects of the file FBXExporter.cpp of the component UV Channel Handler. Executing a manipulation can lead to divide by zero. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The project tagged the reported issue as bug.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00112 · 1.3th percentile
Weaknesses
CWE-369 · Divide By Zero; CWE-404 · Improper Resource Shutdown or Release
Published
2026-05-31T23:00Z
EPSS history
Timeline
  • 31 MAY 23:00Z
    Assimp UV Channel FBXExporter.cpp WriteObjects divide by zero
    cvelistv5