{"id":"CVE-2026-111487","kind":"vulnerability","aliases":["CVE-2026-111487"],"related":[],"title":"Qt3D: assimp scene import plugin out-of-bounds write from crafted model files","description":"An out-of-bounds write vulnerability in the Qt Framework assimp scene import plugin of the Qt3D module.","summary":"The assimp scene import plugin in the Qt3D module of the Qt Framework contains an out-of-bounds write. Per the NVD entry, a crafted scene file can corrupt memory in an application that imports 3D models through this plugin.","severity":"medium","cvss":4.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["c++","package","qt","qt3d"],"not_affected_if":["assimp-plugin-disabled","no-qt3d"],"how_to_check":"- Check whether your application uses the Qt3D module with the assimp scene import plugin enabled.\n- Check your Qt version, for example with `qmake --version` or the Qt version your build reports; the sources do not list affected version ranges.","fix":null,"status":"open","published_at":"2026-10-30T15:16:44+00:00","first_seen_at":"2026-10-30T15:31:09+00:00","triaged_at":"2026-10-30T15:33:53+00:00","updated_at":"2026-10-30T15:33:53+00:00","category":"package","confidence":0.4,"triage":{"at":"2026-10-30T15:33:53Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Qt3D: assimp scene import plugin out-of-bounds write from crafted model files","impact":"medium","summary":"The assimp scene import plugin in the Qt3D module of the Qt Framework contains an out-of-bounds write. Per the NVD entry, a crafted scene file can corrupt memory in an application that imports 3D models through this plugin.","audience":"developers","category":"package","nicknames":[],"who_cares":["qt","qt3d","c++"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"memory corruption in the importing application, possibly code execution","analyst_note":"Find the affected and fixed Qt versions and whether the assimp plugin is on by default, via the Qt advisory or https://nvd.nist.gov/vuln/detail/CVE-2026-111487.","how_to_check":"- Check whether your application uses the Qt3D module with the assimp scene import plugin enabled.\n- Check your Qt version, for example with `qmake --version` or the Qt version your build reports; the sources do not list affected version ranges.","plain_action":"","needs_analyst":true,"not_affected_if":["no-qt3d","assimp-plugin-disabled"],"who_is_affected":"Applications built on the Qt Framework that use the Qt3D module and load 3D scene files through the assimp import plugin are the ones to look at. The sources do not state which Qt versions are affected or whether the plugin is enabled by default, so a team cannot rule itself out from this text alone.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000695,"input_tokens":4067,"output_tokens":576,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-111487':17A,20A '-2026':16A,19A '3d':61B 'applic':58B 'assimp':2A,26B,77C 'bound':9A,43B,70C 'c':21B 'contain':38B 'corrupt':54B 'craft':12A,50B 'cve':15A,18A 'entri':48B 'file':14A,52B 'framework':37B,76C 'import':4A,28B,60B,79C 'memori':55B 'model':13A,62B 'modul':33B,84C 'nvd':47B 'out-of-bound':6A,40B,67C 'packag':22B 'per':45B 'plugin':5A,29B,65B,80C 'qt':23B,36B,75C 'qt3d':1A,24B,32B,83C 'scene':3A,27B,51B,78C 'vulner':72C 'write':10A,44B,71C","nicknames":[],"mitigations":[],"who_affected":"Applications built on the Qt Framework that use the Qt3D module and load 3D scene files through the assimp import plugin are the ones to look at. The sources do not state which Qt versions are affected or whether the plugin is enabled by default, so a team cannot rule itself out from this text alone.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-30T15:16:44+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:X/RE:L/U:Amber","cvss_by":"a59d8014-47c4-4630-ab43-e1b13cbe58e3","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111487","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111487","severity":null,"published_at":"2026-10-30T15:16:44+00:00","modified_at":"2026-10-30T15:16:44+00:00","first_seen_at":"2026-10-30T15:31:09+00:00","fetched_at":"2026-10-30T15:31:09+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}