ROS-20240807-01

Vulnerability in the implementation of ColladaParser::ExtractDataObjectFromChannel() function of the Open Asset Import Library (Assimp)
3D models Open Asset Import Library (Assimp) is related to memory usage after release.
Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized
access to confidential information

Vulnerability in File Handler component of Golang programming language is related to heap buffer overflow.
Exploitation of the vulnerability could allow an attacker to execute arbitrary code by injecting a specially crafted file into the product.
specially crafted file