Out-of-bounds Read

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

assimp:assimp_fuzzer: Crash in Assimp::IOStreamBuffer<char>::getNextLine

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5801806919237632 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f586c2c4000 Crash Stat...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ScenePreprocessor::ProcessMesh

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4578023118077952 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MDLImporter::ParseTextureColorData

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5022491164147712 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x61c000028767 Crash...

OSV-2022-624 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

PT-2022-37124

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description A heap buffer overflow read issue has been identified. The crash occurs in the Assimp::MD5::MD5Parser::ParseHeader function, which is called by Assimp::MD5::MD5Parser::MD5Parser and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6422827049287680 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Crash in Assimp::ObjFileMtlImporter::getTexture

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4515118433566720 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x00000000505e Crash State:...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ObjFileParser::getFace

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5761129826222080 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6030000007da Crash...

OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...

PT-2022-36989

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a heap-buffer-overflow read. Technical details about the crash include the function names Assimp::ASE::Parser::ParseLV1SoftSkinBlock, Assimp::ASE::Parser::Parse, and...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6539384737890304 Project: assimp Fuzzing Engine: honggfuzz Fuzz Target: assimpfuzzer Job Type: honggfuzzasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Bad-cast to Assimp::D3DS::Material from invalid vptr in Assimp::ASE::Parser::ParseLV2MaterialBlock

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=5921493454815232 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x7f9305060a70 Crash State:...

assimp:assimp_fuzzer: Bad-cast to Assimp::ZipFile from Assimp::MemoryIOStream in Assimp::IOSystem2Unzip::opendisk

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6688053861679104 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Bad-cast Crash Address: 0x000003c3e370 Crash State:...

assimp:assimp_fuzzer: Stack-buffer-overflow in aiMaterial::AddBinaryProperty

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6520123362508800 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Stack-buffer-overflow READ Crash Address: 0x7f3b8940bc...

OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

PT-2022-36850

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. The crash occurs in the SuperFastHash function and involves the Assimp::SceneCombiner::AddNodePrefixesChecked...

assimp:assimp_fuzzer: Heap-buffer-overflow in SuperFastHash

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=4639172407721984 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

assimp:assimp_fuzzer: Object-size in std::__1::vector<Assimp::ASE::Material, std::__1::allocator<Assimp::ASE::Materia

Project: https://github.com/assimp/assimp.git Detailed Report: https://oss-fuzz.com/testcase?key=6564247633526784 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Object-size Crash Address: Crash State:...

OSV-2022-21 Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43414 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::IOSystem2Unzip::opendisk callzopendisk64 unzOpenCurrentFile3...