1205 matches found
JVN#87710540: Assimp vulnerable to heap-based buffer overflow
Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Impact An attacker may execute arbitrary code by inputting a specially crafted file into the product. Solution Update the Software Update the software to the latest version according to the...
OPENSUSE-SU-2024:13286-1 assimp-devel-5.3.1-1.1 on GA media
These are all security issues fixed in the assimp-devel-5.3.1-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13291-1 assimp-devel-5.3.1-2.1 on GA media
These are all security issues fixed in the assimp-devel-5.3.1-2.1 package on the GA media of openSUSE Tumbleweed...
adder-codec-rs (0.1.15), assimp (>=0.0.4, <=0.0.6) +56 more potentially affected by unknown CVE via mmap (0.1.1)
mmap CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mmap and may be impacted: - adder-codec-rs 0.1.15 - assimp =0.0.4, =0.9.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - cupi 0.1.0 - cupishift 0.1.0 - cylus 0.1.0 and...
OSV-2023-869 Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile...
PT-2023-36018 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...
OSV-2023-536 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...
OSV-2023-404 Invalid-free in Assimp::FBX::Scope::Scope
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59056 Crash type: Invalid-free Crash state: Assimp::FBX::Scope::Scope Assimp::FBX::Element::Element Assimp::FBX::Scope::Scope...
PT-2023-35831 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to an Invalid-free crash type. It involves the Assimp::FBX::Scope::Scope and Assimp::FBX::Element::Element functions. No information is provided about the estimated numb...
OSV-2023-402 Heap-use-after-free in Assimp::FBXExporter::WriteObjects
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59036 Crash type: Heap-use-after-free READ 4 Crash state: Assimp::FBXExporter::WriteObjects Assimp::FBXExporter::ExportBinary Assimp::ExportSceneFBX...
PT-2023-35830 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a heap-use-after-free error. Technical details about the crash include the Assimp::FBXExporter::WriteObjects and Assimp::FBXExporter::ExportBinary functions, as well ...
OSV-2023-385 Bad-cast to Assimp::BaseImporter from invalid vptr
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724 Crash type: Bad-cast Crash state: Bad-cast to Assimp::BaseImporter from invalid vptr Assimp::Importer::ReadFile Assimp::BatchLoader::LoadAll...
PT-2023-35821 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash caused by a bad-cast in the Assimp library. Specifically, it occurs when attempting to cast to Assimp::BaseImporter from an invalid vptr. This happens in the...
OSV-2023-276 Heap-use-after-free in aiScene::~aiScene
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57656 Crash type: Heap-use-after-free READ 8 Crash state: aiScene::aiScene Assimp::BatchLoader::BatchLoader Assimp::LWSImporter::InternReadFile...
PT-2023-35751 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is identified in the aiScene destructor,...
OSV-2023-201 UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile...
PT-2023-35716 · Assimp · Assimp
Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash in the Assimp library, specifically in the SMDImporter component. The crash occurs when parsing node information, nodes section, or the file itself, as...
SUSE CVE-2022-38528
Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...
