Live › vulnerability › CVE-2026-111487
The assimp scene import plugin in the Qt3D module of the Qt Framework contains an out-of-bounds write. Per the NVD entry, a crafted scene file can corrupt memory in an application that imports 3D models through this plugin.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 15:31 UTC. All times on this page are UTC.
Applications built on the Qt Framework that use the Qt3D module and load 3D scene files through the assimp import plugin are the ones to look at. The sources do not state which Qt versions are affected or whether the plugin is enabled by default, so a team cannot rule itself out from this text alone.
No product ranges from the sources yet.
qmake --version or the Qt version your build reports; the sources do not list affected version ranges.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.
This page as .md · .json · in your agent: get_signal("CVE-2026-111487")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.