CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

CVE-2024-40724

CVE-2024-40724 affects the Assimp library prior to 5.4.2, with a heap-based buffer overflow that lets a local attacker execute code via a crafted input file. Connected advisories note fixed versions (e.g., 5.4.2 and newer) and mention related mitigations in distributions (Mageia, openSUSE/SUSE, o...

CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

CVE-2024-40724

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

PT-2024-5528 · Assimp +4 · Assimp +4

Name of the Vulnerable Software and Affected Versions: Assimp versions prior to 5.4.2 Description: The issue is related to a heap-based buffer overflow vulnerability. It allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product. This can be achieved...

CVE-2024-40724: Out-of-bounds Write

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product...

Assimp vulnerable to heap-based buffer overflow

Overview Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Yuhei Kawakoya of NTT Security Holdings reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

JVN#87710540: Assimp vulnerable to heap-based buffer overflow

Assimp provided by Open Asset Import Library contains a heap-based buffer overflow vulnerability CWE-122. Impact An attacker may execute arbitrary code by inputting a specially crafted file into the product. Solution Update the Software Update the software to the latest version according to the...

OPENSUSE-SU-2024:13291-1 assimp-devel-5.3.1-2.1 on GA media

These are all security issues fixed in the assimp-devel-5.3.1-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13286-1 assimp-devel-5.3.1-1.1 on GA media

These are all security issues fixed in the assimp-devel-5.3.1-1.1 package on the GA media of openSUSE Tumbleweed...

adder-codec-rs (0.1.15), assimp (>=0.0.4, <=0.0.6) +56 more potentially affected by unknown CVE via mmap (0.1.1)

mmap CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mmap and may be impacted: - adder-codec-rs 0.1.15 - assimp =0.0.4, =0.9.0, =0.1.0, =0.1.0, =0.1.2, =0.1.0, =0.1.0, =0.1.0, =0.4.0 - cupi 0.1.0 - cupishift 0.1.0 - cylus 0.1.0 and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::PLYImporter::LoadVertex

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6544205135544320 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::IOStreamBuffer<char>::getNextLine

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4814561508130816 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7fb2c12eb800 Crash...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD3Importer::InternReadFile

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4915531437113344 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

assimp:assimp_fuzzer: Index-out-of-bounds in Assimp::Q3DImporter::InternReadFile

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5085800588967936 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5068859130118144 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::HMPImporter::CreateOutputFaceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5028159340544000 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 4 Crash Address:...

OSV-2023-869 Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile...

PT-2023-36018 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5MeshParser::MD5MeshParser function, which is called by Assimp::MD5Importer::LoadMD5MeshFile and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5531321767952384 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...