OESA-2026-2053 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A heap-buffer-overflow vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2024-48424

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the...

SUSE CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A flaw was found in the Assimp asset import library. An attacker my be able to trigger a buffer overflow condition via specially-crafted OpenGEX files. This may lead to a denial of service or other unexpected behavior. Mitigation Mitigation for this issue is either not available or the currently...

PYSEC-2024-292

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

PYSEC-2024-292

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

DEBIAN-CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

UBUNTU-CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

PT-2024-33104 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp library affected versions not specified Description: A heap-buffer-overflow issue has been identified in the OpenDDLParser::parseStructure function within the library, specifically during the processing of OpenGEX files. Recommendation...

CVE-2024-48424

CVE-2024-48424 is a heap-buffer-overflow in OpenDDLParser::parseStructure() of the Assimp library, triggered while processing OpenGEX files. The provided docs consistently tie this to a vulnerability in Assimp 5.4.3 and document fixes across multiple distros (openSUSE/SUSE advisory SUSE openSUSE-...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

OSV-2021-1385 Heap-buffer-overflow in Assimp::BaseImporter::ConvertToUTF8

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39339 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::BaseImporter::ConvertToUTF8 Assimp::BaseImporter::TextFileToBuffer Assimp::OpenGEX::OpenGEXImporter::InternReadFile...