assimp security vulnerabilities

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from allowing read access to an invalid memory address 0x1000c9714971...

assimp security vulnerabilities

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from a heap buffer overflow vulnerability found in the OpenDDLParser::parseStructure function...

assimp security vulnerabilities

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp version v.5.4.3. An attacker exploited the vulnerability to execute arbitrary code via the CallbackToLogRedirector function...

PT-2024-33104

Name of the Vulnerable Software and Affected Versions Assimp library affected versions not specified Description A heap-buffer-overflow issue has been identified in the OpenDDLParser::parseStructure function within the library, specifically during the processing of OpenGEX files. Recommendations ...

CVE-2024-48425: Buffer Copy without Checking Size of Input

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

CVE-2024-48425

A segmentation fault (SEGV) was identified in the Assimp library within the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function. The crash is caused by a null or invalid pointer dereference during a read access violation at address 0x000000000460, first detected during fuzz testing usin...

PT-2024-33106

Name of the Vulnerable Software and Affected Versions Assimp library affected versions not specified Description A segmentation fault was detected in the SortByPTypeProcess::Execute function during fuzz testing with AddressSanitizer, caused by a read access to an invalid memory address...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

CVE-2024-48426

The Assimp library contains a segmentation fault (SEGV) within the SortByPTypeProcess::Execute function. This vulnerability was identified during fuzz testing using AddressSanitizer and is caused by a read access to an invalid memory address (0x1000c9714971). A Nessus plugin indicates that some L...

CVE-2024-48423

The provided connected documents confirm CVE-2024-48423 affects the Assimp library (v5.4.3) and enables local arbitrary code execution via CallbackToLogRedirector. OpenSUSE/SUSE advisories and OSV entries indicate patches/fixes have been released in multiple Linux distributions (e.g., openSUSE-SU...

CVE-2024-48424

A heap-buffer-overflow vulnerability exists in the OpenDDLParser::parseStructure function of the Assimp library. This flaw occurs specifically when processing OpenGEX files. The vulnerability has been addressed in various distributions, including openSUSE 15 (via openSUSE-SU-2025:0113-1) and Amaz...

assimp security vulnerabilities

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from a read access conflict at address 0x000000000460, which points to page zero, indicating that the pointer dereference is null or invalid...

CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

PT-2024-33105 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A segmentation fault was detected in the Assimp::SplitLargeMeshesProcess Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs...

PT-2024-33103 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: assimp version 5.4.3 Description: An issue in the Assimp library allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function. This enables the attacker to potentially gain control over the system. Recommendation...