CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

UBUNTU-CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

UBUNTU-CVE-2024-48424

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files...

PYSEC-2024-120

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

UBUNTU-CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

UBUNTU-CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

assimp 安全漏洞

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from a read access conflict at address 0x000000000460, which points to page zero, indicating that the pointer dereference is null or invalid...

CVE-2024-48425

CVE-2024-48425 affects the Open Asset Import Library (assimp) in SplitLargeMeshesProcess_Triangle::UpdateNode, causing a segmentation fault from a null/invalid pointer dereference observed during AddressSanitizer fuzzing (read access to 0x460). Reports across openSUSE/SUSE advisories and Nessus p...

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

CVE-2024-48423

The provided connected documents confirm CVE-2024-48423 affects the Assimp library (v5.4.3) and enables local arbitrary code execution via CallbackToLogRedirector. OpenSUSE/SUSE advisories and OSV entries indicate patches/fixes have been released in multiple Linux distributions (e.g., openSUSE-SU...

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

CVE-2024-48426

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

CVE-2024-48425

A segmentation fault SEGV was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a...

PT-2024-33105 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A segmentation fault was detected in the Assimp::SplitLargeMeshesProcess Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs...

PT-2024-33103 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: assimp version 5.4.3 Description: An issue in the Assimp library allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function. This enables the attacker to potentially gain control over the system. Recommendation...

assimp 安全漏洞

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from allowing read access to an invalid memory address 0x1000c9714971...

PT-2024-33104 · Assimp +2 · Assimp +2

Name of the Vulnerable Software and Affected Versions: Assimp library affected versions not specified Description: A heap-buffer-overflow issue has been identified in the OpenDDLParser::parseStructure function within the library, specifically during the processing of OpenGEX files. Recommendation...

assimp 安全漏洞

assimp is an assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in assimp that stems from a heap buffer overflow vulnerability found in the OpenDDLParser::parseStructure function...

PT-2024-33106 · Assimp +1 · Assimp +1

Name of the Vulnerable Software and Affected Versions: Assimp library affected versions not specified Description: A segmentation fault was detected in the SortByPTypeProcess::Execute function during fuzz testing with AddressSanitizer, caused by a read access to an invalid memory address...