CVE-2024-40724

2024-07-1907:38:28

jpcert

www.cve.org

buffer overflow

vulnerability

assimp

arbitrary code

crafted file

cve-2024-40724

EPSS

Percentile

5.0%

JSON

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.

CNA Affected

[
  {
    "vendor": "Open Asset Import Library",
    "product": "Assimp",
    "versions": [
      {
        "version": "prior to 5.4.2",
        "status": "affected"
      }
    ]
  }
]