197 matches found
PYSEC-2024-120
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...
assimp 安全漏洞
assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from allowing read access to an invalid memory address 0x1000c9714971...
CVE-2024-48426
The Assimp library contains a segmentation fault (SEGV) within the SortByPTypeProcess::Execute function. This vulnerability was identified during fuzz testing using AddressSanitizer and is caused by a read access to an invalid memory address (0x1000c9714971). A Nessus plugin indicates that some L...
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...
PT-2024-33104
Name of the Vulnerable Software and Affected Versions Assimp library affected versions not specified Description A heap-buffer-overflow issue has been identified in the OpenDDLParser::parseStructure function within the library, specifically during the processing of OpenGEX files. Recommendations ...
PT-2024-33103 · Assimp +2 · Assimp +2
Name of the Vulnerable Software and Affected Versions: assimp version 5.4.3 Description: An issue in the Assimp library allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function. This enables the attacker to potentially gain control over the system. Recommendation...
PT-2024-33105 · Assimp +2 · Assimp +2
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A segmentation fault was detected in the Assimp::SplitLargeMeshesProcess Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs...
PT-2024-33106
Name of the Vulnerable Software and Affected Versions Assimp library affected versions not specified Description A segmentation fault was detected in the SortByPTypeProcess::Execute function during fuzz testing with AddressSanitizer, caused by a read access to an invalid memory address...
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...
CVE-2024-48424
A heap-buffer-overflow vulnerability exists in the OpenDDLParser::parseStructure function of the Assimp library. This flaw occurs specifically when processing OpenGEX files. The vulnerability has been addressed in various distributions, including openSUSE 15 (via openSUSE-SU-2025:0113-1) and Amaz...
assimp 安全漏洞
assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp version v.5.4.3. An attacker exploited the vulnerability to execute arbitrary code via the CallbackToLogRedirector function...
assimp 安全漏洞
assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from a heap buffer overflow vulnerability found in the OpenDDLParser::parseStructure function...
CVE-2024-48426
A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...
CVE-2024-48425
A segmentation fault (SEGV) was identified in the Assimp library within the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function. The crash is caused by a null or invalid pointer dereference during a read access violation at address 0x000000000460, first detected during fuzz testing usin...
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...
CVE-2024-48425
A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...
CVE-2024-48425
A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...