Bug: Issue 483087100: assimp:assimp_fuzzer_gltf: Out-of-memory in assimp_fuzzer_gltf

https://issues.oss-fuzz.com/issues/483087100

Reference Info: 483087100 assimp:assimp_fuzzer_gltf: Out-of-memory in assimp_fuzzer_gltf
component: [Public Trackers > 1362134 > OSS Fuzz](https://issues.oss-fuzz.com/components/1638179)
status: New
reporter: [87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com)
cc: [ki...@assimp.org](mailto:ki...@assimp.org), [kim.kulling@googlemail.com](mailto:kim.kulling@googlemail.com), [re...@fastmail.com](mailto:re...@fastmail.com)
collaborators: [co...@oss-fuzz.com](mailto:co...@oss-fuzz.com)
type: Bug
access level: Limited visibility
priority: P2
severity: S4
hotlist: [Reproducible](https://issues.oss-fuzz.com/hotlists/6182481)
retention: Component default
Project: assimp
Reported: Feb 10, 2026

[87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com) added [comment #1](https://issues.oss-fuzz.com/issues/483087100#comment1):
Detailed Report: [https://oss-fuzz.com/testcase?key=5065544327036928](https://www.google.com/url?q=https://oss-fuzz.com/testcase?key%3D5065544327036928&sa=D&source=buganizer&usg=AOvVaw3WxC1Ea2-Tn2rBOo-Wg8k9)

Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer_gltf
Job Type: libfuzzer_asan_assimp
Platform Id: linux

Crash Type: Out-of-memory (exceeds 2560 MB)
Crash Address:
Crash State:
assimp_fuzzer_gltf

Sanitizer: address (ASAN)

Regressed: [https://oss-fuzz.com/revisions?job=libfuzzer_asan_assimp&range=202601210716:202601220724](https://www.google.com/url?q=https://oss-fuzz.com/revisions?job%3Dlibfuzzer_asan_assimp%26range%3D202601210716:202601220724&sa=D&source=buganizer&usg=AOvVaw3OsRgiAWgVQi4sydMbqIu-)

Reproducer Testcase: [https://oss-fuzz.com/download?testcase_id=5065544327036928](https://www.google.com/url?q=https://oss-fuzz.com/download?testcase_id%3D5065544327036928&sa=D&source=buganizer&usg=AOvVaw17e4H5U1yijbpqJ29ULpwh)

Issue filed automatically.

See [https://google.github.io/oss-fuzz/advanced-topics/reproducing](https://www.google.com/url?q=https://google.github.io/oss-fuzz/advanced-topics/reproducing&sa=D&source=buganizer&usg=AOvVaw2PF-rd9_FrkFJ-mNErDWkF) for instructions to reproduce this bug locally.
When you fix this bug, please
* mention the fix revision(s).
* state whether the bug was a short-lived regression or an old bug in any stable releases.
* add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at [https://github.com/google/oss-fuzz/issues](https://www.google.com/url?q=https://github.com/google/oss-fuzz/issues&sa=D&source=buganizer&usg=AOvVaw3uDxRzHL584JLrGWXGLu6V). Comments on individual Monorail issues are not monitored.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.

Generated by Google IssueTracker notification system.

Start with the assimp_fuzzer_gltf target and download the linked reproducer testcase 5065544327036928. Follow the OSS-Fuzz reproduction instructions to confirm the out-of-memory failure and inspect the revision range where it regressed. Done means an upstream fix prevents the reported memory failure and documents the fix revision and release impact.

Written by the indexing model from the issue text.