OSV-2023-536 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

PT-2023-35893

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5Parser::ParseHeader function, which is called by Assimp::MD5::MD5Parser::MD5Parser and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4790975281889280 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Crash in Assimp::ASE::Parser::ParseLV4MeshBonesVertices

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4667047481311232 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00037fff7ffe Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::SkipSkinLump_3DGS_MDL7

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6311702589997056 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

assimp:assimp_fuzzer: Stack-buffer-overflow in aiMaterial::AddBinaryProperty

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6051025914298368 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f4b654b2c24 Crash...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::FBXExporter::WriteObjects

Detailed Report: https://oss-fuzz.com/testcase?key=5697543976386560 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x61200000b710 Crash State: Assimp::FBXExporter::WriteObjects...

assimp:assimp_fuzzer: Crash in void std::__1::allocator_traits<std::__1::allocator<std::__1::__list_node<Assimp

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6507247795306496 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00013fe6665e Crash Stat...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::Importer::ReadFile in Assimp::BatchLoader::LoadAll

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5296279169925120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002ea29b0 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseProcess from invalid vptr in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5024410097287168 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000046e2f00 Crash State:...

assimp:assimp_fuzzer: Crash in std::__1::__list_imp<Assimp::LWS::Element, std::__1::allocator<Assimp::LWS::Elem

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5473356041027584 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000014df450 Crash...

assimp:assimp_fuzzer: Container-overflow in ODDLParser::logInvalidTokenError

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6596975261515776 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Container-overflow READ Crash Address: 0x6190000021db...

OSV-2023-404 Invalid-free in Assimp::FBX::Scope::Scope

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59056 Crash type: Invalid-free Crash state: Assimp::FBX::Scope::Scope Assimp::FBX::Element::Element Assimp::FBX::Scope::Scope...

PT-2023-35831 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to an Invalid-free crash type. It involves the Assimp::FBX::Scope::Scope and Assimp::FBX::Element::Element functions. No information is provided about the estimated numb...

OSV-2023-402 Heap-use-after-free in Assimp::FBXExporter::WriteObjects

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=59036 Crash type: Heap-use-after-free READ 4 Crash state: Assimp::FBXExporter::WriteObjects Assimp::FBXExporter::ExportBinary Assimp::ExportSceneFBX...

PT-2023-35830 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a heap-use-after-free error. Technical details about the crash include the Assimp::FBXExporter::WriteObjects and Assimp::FBXExporter::ExportBinary functions, as well ...

assimp:assimp_fuzzer: Invalid-free in Assimp::FBX::Scope::Scope

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4658377717055488 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Invalid-free Crash Address: 0x62d000000520 Crash State...

assimp:assimp_fuzzer: Heap-use-after-free in Assimp::FBXExporter::WriteObjects

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5725633804894208 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-use-after-free READ 4 Crash Address: 0x6020000312...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::Importer::ReadFile in Assimp::BatchLoader::LoadAll

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5060182359801856 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003ae4fe0 Crash State:...

assimp:assimp_fuzzer: Crash in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5513536726761472 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001033f4c42 Crash Stat...