DEBIAN-CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash...

CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

CVE-2024-48423

The provided connected documents confirm CVE-2024-48423 affects the Assimp library (v5.4.3) and enables local arbitrary code execution via CallbackToLogRedirector. OpenSUSE/SUSE advisories and OSV entries indicate patches/fixes have been released in multiple Linux distributions (e.g., openSUSE-SU...

CVE-2024-46632

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function...

PT-2024-32084 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: The issue is related to a Buffer Overflow that occurs via the MD5Importer::LoadMD5MeshFile function. This function is part of the MD5Importer in Assimp. Recommendations: For Assimp version 5.4.3, as a tempora...

Assimp vulnerable to heap-based buffer overflow

Overview PlyLoader.cpp of Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

UBUNTU-CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

Assimp vulnerable to heap-based buffer overflow

Overview Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

PT-2023-36018 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...

assimp 资源管理错误漏洞

assimp is assimp open source a library . It is used to import and export various 3D model formats. assimp version 5.1.4 security vulnerability , the vulnerability stems from the file /code/AssetLib/Collada/ColladaParser.cpp in the function ColladaParser::ExtractDataObjectFromChannel there is a...