JVN#87710540: Assimp vulnerable to heap-based buffer overflow

Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability (CWE-122).

Impact

An attacker may execute arbitrary code by inputting a specially crafted file into the product.

Solution

Update the Software
Update the software to the latest version according to the information provided by the developer.

The developer has released version 5.4.2 that contains a fix for this vulnerability.

Products Affected

• Assimp versions prior to 5.4.2