6245 matches found
CVE-2025-3549
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer...
PYSEC-2025-171
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer...
CVE-2025-3548
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...
CVE-2025-3549
CVE-2025-3549 affects Open Asset Import Library Assimp 5.4.3. The vulnerability is in Assimp::MD3Importer::ValidateSurfaceHeaderOffsets (MD3Loader.cpp, File Handler) and causes a heap-based buffer overflow. The issue requires local access to exploit, and the exploit has been disclosed publicly. C...
CVE-2025-3549 Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer...
CVE-2025-32726
Improper access control in Visual Studio Code allows an authorized attacker to elevate privileges locally...
CVE-2025-29803
Uncontrolled search path element in Visual Studio Tools for Applications and SQL Server Management Studio allows an authorized attacker to elevate privileges locally...
CVE-2025-27735
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
CVE-2025-26681
Use after free in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally...
CVE-2025-21204
Improper link resolution before file access 'link following' in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2025-29809
Insecure storage of sensitive information in Windows Kerberos allows an authorized attacker to bypass a security feature locally...
CVE-2025-27490
Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally...
CVE-2025-27467
Use after free in Windows Digital Media allows an authorized attacker to elevate privileges locally...
CVE-2025-27739
Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally...
CVE-2025-27475
Sensitive data storage in improperly locked memory in Windows Update Stack allows an authorized attacker to elevate privileges locally...
CVE-2025-27743
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...
CVE-2025-24062
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...
CVE-2025-24074
Improper input validation in Windows DWM Core Library allows an authorized attacker to elevate privileges locally...