PT-2024-32084 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Assimp version 5.4.3 Description: The issue is related to a Buffer Overflow that occurs via the MD5Importer::LoadMD5MeshFile function. This function is part of the MD5Importer in Assimp. Recommendations: For Assimp version 5.4.3, as a tempora...

assimp security vulnerabilities

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp version 5.4.3, which stems from vulnerability to a buffer overflow attack in the MD5Imtor::LoadMD5MeshFile function...

CVE-2024-46632

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function...

CVE-2024-46632

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function...

CVE-2024-46632

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function...

assimp:assimp_fuzzer: Bad-cast to Assimp::LogStream from invalid vptr in LogToCallbackRedirector::~LogToCallbackRedirector

Detailed Report: https://oss-fuzz.com/testcase?key=5651401240281088 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x570dfd37cab0 Crash State: Bad-cast to Assimp::LogStream from invalid vptr...

assimp:assimp_fuzzer: Heap-use-after-free in LogToCallbackRedirector::~LogToCallbackRedirector

Detailed Report: https://oss-fuzz.com/testcase?key=5244840844001280 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x505000000040 Crash State:...

SUSE CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

Assimp vulnerable to heap-based buffer overflow

Overview PlyLoader.cpp of Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

DEBIAN-CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

UBUNTU-CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

The Open Asset Import Library (Assimp) contains a heap-based buffer overflow vulnerability in versions prior to 5.4.3 . This flaw occurs during the processing of 3D models, specifically within the OpenDDLParser::parseStructure() function, and can be triggered by importing a specially crafted file...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

CVE-2024-45679: Heap-based Buffer Overflow

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...