PT-2023-35716 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash in the Assimp library, specifically in the SMDImporter component. The crash occurs when parsing node information, nodes section, or the file itself, as...

assimp:assimp_fuzzer: Crash in Assimp::SMDImporter::ParseNodeInfo

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4879958521806848 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x6267fffffff8 Crash State...

assimp:assimp_fuzzer: Crash in Assimp::SortByPTypeProcess::Execute

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4709035804065792 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7fc6664ab0ec Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseProcess from invalid vptr in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4741682932613120 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002702f20 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseImporter from invalid vptr in Assimp::DeleteImporterInstanceList

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5060726323806208 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002a32f80 Crash State:...

assimp:assimp_fuzzer: Crash in Assimp::D3DS::Material::Material

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5935689788424192 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0xfffffffffffffd68 Crash...

SUSE CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

SUSE CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseProcess from invalid vptr in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5290334113628160 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003352fb0 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::BaseProcess from invalid vptr in Assimp::Importer::~Importer

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5118530673836032 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000002db2f20 Crash State:...

assimp:assimp_fuzzer: Crash in SuperFastHash

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5135836296642560 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0000035aa000 Crash Stat...

DEBIAN-CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

Design/Logic Flaw

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

PYSEC-2023-290

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

UBUNTU-CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

PT-2023-36077

Name of the Vulnerable Software and Affected Versions assimp version 5.1.4 Description A use after free issue was discovered in the function ColladaParser::ExtractDataObjectFromChannel located in the file /code/AssetLib/Collada/ColladaParser.cpp. Recommendations For assimp version 5.1.4, consider...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

PT-2023-9306 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: assimp version 5.1.4 Description: A use after free issue occurred in the ColladaParser::ExtractDataObjectFromChannel function, located in the /code/AssetLib/Collada/ColladaParser.cpp file. This issue is related to the implementation of the...