Hi,

The following vulnerability was published for assimp.

CVE-2026-14610[0]:
| A flaw has been found in Open Asset Import Library Assimp up to
| 6.0.5. Impacted is the function Assimp::CSMImporter::InternReadFile
| of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM
| File Handler. This manipulation causes heap-based buffer overflow.
| The attack is restricted to local execution. The exploit has been
| published and may be used. Patch name:
| eb84eec580d3f4ba2f0fd87409b7d0744620f11e. Applying a patch is the
| recommended action to fix this issue.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2026-14610
https://www.cve.org/CVERecord?id=CVE-2026-14610
[1] https://github.com/assimp/assimp/issues/6622
[2] https://github.com/assimp/assimp/pull/6649
[3] https://github.com/assimp/assimp/commit/eb84eec580d3f4ba2f0fd87409b7d0744620f11e

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore