Division by zero Affecting assimp package, versions [0,]


Severity

Recommended
0.0
medium
0
10

CVSS assessment by Snyk's Security Team. Learn more

Threat Intelligence

Exploit Maturity
Proof of Concept
EPSS
0.01% (3rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CONAN-ASSIMP-17226972
  • published8 Jun 2026
  • disclosed1 Jun 2026
  • creditTYGLS

Introduced: 1 Jun 2026

NewCVE-2026-10201  (opens in a new tab)
CWE-369  (opens in a new tab)

How to fix?

There is no fixed version for assimp.

Overview

Affected versions of this package are vulnerable to Division by zero in the WriteObjects function of the UV Channel Handler component. An attacker can cause a denial of service by providing crafted input that triggers a divide by zero condition during local processing.

References

CVSS Base Scores

version 4.0
version 3.1