CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

CVE-2022-45748 concerns an issue in the open-source library assimp 5.1.4 where a use-after-free occurs in ColladaParser::ExtractDataObjectFromChannel (file path: /code/AssetLib/Collada/ColladaParser.cpp). The connected sources confirm the vulnerability exists in this version of assimp and describ...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

Use After Free

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4890437695700992 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporter from invalid vptr in Assimp::DeleteImporterInstanceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5637981132423168 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x0000037c2f10 Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileParser::getFace

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5781186265350144 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 3 Crash Address:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseSection

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5407417422970880 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

OSV-2022-1258 Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes...

PT-2022-36809 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow issue was identified, which can cause a crash. The crash occurs in the Assimp::ObjFileImporter module, specifically in the functions createVertexArray, createTopology,...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6337324114116608 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 12 Crash Address: 0x609000000988 Crash...

assimp:assimp_fuzzer: Crash in UpdateMeshReferences

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6020769077657600 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6042fafb0ad8 Crash State...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::DeleteImporterInstanceList in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5432810060251136 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002f50470 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporterAssimp::Importer::ReadFile in Assimp::BatchLoader::LoadAll

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5086163820216320 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003e7e880 Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::FileSystemFilter::Cleanup

Detailed Report: https://oss-fuzz.com/testcase?key=6091762766839808 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6040000928c0 Crash State: Assimp::FileSystemFilter::Cleanup...

OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

PT-2022-36735 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash in the Assimp library, specifically in the Assimp::ObjFileMtlImporter class. The crash occurs when the getFloatValue function is called, which is part of the...

assimp:assimp_fuzzer: Crash in Assimp::ObjFileMtlImporter::getFloatValue

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4508318827937792 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x0000000050e0 Crash State:...

Open Asset Import Library Heap Buffer Overflow Info Disclosure

The vulnerability of the Assimp::XFileImporter::CreateMeshes implementation in the Open Asset Import Library Assimp is related to segmentation fault issues. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

GLSA-202210-01 : Open Asset Import Library (assimp): Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-01 Open Asset Import Library assimp: Multiple Vulnerabilities - Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...