Assimp vulnerable to heap-based buffer overflow

Overview Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

PT-2023-36018 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...

assimp 资源管理错误漏洞

assimp is assimp open source a library . It is used to import and export various 3D model formats. assimp version 5.1.4 security vulnerability , the vulnerability stems from the file /code/AssetLib/Collada/ColladaParser.cpp in the function ColladaParser::ExtractDataObjectFromChannel there is a...