Lucene search
+L

994 matches found

CNNVD
CNNVD
added 2023/01/20 12:0 a.m.6 views

assimp 资源管理错误漏洞

assimp is assimp open source a library . It is used to import and export various 3D model formats. assimp version 5.1.4 security vulnerability , the vulnerability stems from the file /code/AssetLib/Collada/ColladaParser.cpp in the function ColladaParser::ExtractDataObjectFromChannel there is a...

8.8CVSS7.8AI score0.00723EPSS
Exploits1References2
OSV
OSV
added 2023/01/20 12:0 a.m.23 views

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

8.8CVSS8.8AI score0.00723EPSS
Exploits1References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/01/20 12:0 a.m.60 views

Use After Free

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

8.8CVSS2.3AI score0.00723EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2023/01/20 12:0 a.m.48 views

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

9AI score0.00723EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2023/01/20 12:0 a.m.8 views

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

9AI score0.00723EPSS
Exploits1References1
CVE
CVE
added 2023/01/20 12:0 a.m.58 views

CVE-2022-45748

CVE-2022-45748 concerns an issue in the open-source library assimp 5.1.4 where a use-after-free occurs in ColladaParser::ExtractDataObjectFromChannel (file path: /code/AssetLib/Collada/ColladaParser.cpp). The connected sources confirm the vulnerability exists in this version of assimp and describ...

8.8CVSS8.7AI score0.00723EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/12/11 1:2 p.m.6 views

OSV-2022-1258 Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/12/11 12:0 a.m.2 views

PT-2022-36809 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: A heap buffer overflow issue was identified, which can cause a crash. The crash occurs in the Assimp::ObjFileImporter module, specifically in the functions createVertexArray, createTopology,...

7.4AI score
Exploits0References2
OSV
OSV
added 2022/11/03 12:0 a.m.13 views

OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

7.2AI score
Exploits0References1
Positive Technologies
Positive Technologies
added 2022/11/03 12:0 a.m.5 views

PT-2022-36735 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash in the Assimp library, specifically in the Assimp::ObjFileMtlImporter class. The crash occurs when the getFloatValue function is called, which is part of the...

6.8AI score
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/10/20 12:0 a.m.7 views

The vulnerability in the implementation of the Assimp::XFileImporter::CreateMeshes() function of the Open Asset Import Library (Assimp) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Assimp::XFileImporter::CreateMeshes implementation in the Open Asset Import Library Assimp is related to segmentation fault issues. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

7.8CVSS6.5AI score0.00648EPSS
Exploits1References4Affected Software2
Redos
Redos
added 2022/10/17 12:0 a.m.17 views

ROS-20221017-02

The Open Asset Import Library Assimp 3D model import library vulnerability is related to a segmentation violation via the Assimp::XFileImporter::CreateMeshes component. segmentation via Assimp::XFileImporter::CreateMeshes component. Exploitation of the vulnerability could allow an attacker acting...

6.5CVSS6.2AI score0.00648EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2022/10/17 12:0 a.m.15 views

GLSA-202210-01 : Open Asset Import Library (assimp): Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-01 Open Asset Import Library assimp: Multiple Vulnerabilities - Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...

5.5CVSS6AI score0.00942EPSS
Exploits1References3
NVD
NVD
added 2022/09/06 11:15 p.m.23 views

CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS0.00648EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2022/09/06 11:15 p.m.4 views

CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS5.7AI score0.00648EPSS
Exploits1References2
OSV
OSV
added 2022/09/06 11:15 p.m.3 views

DEBIAN-CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS6.3AI score0.00648EPSS
Exploits1References1
Prion
Prion
added 2022/09/06 11:15 p.m.13 views

Open redirect

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

4.3CVSS6.4AI score0.00648EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/09/06 11:15 p.m.3 views

PYSEC-2022-43149

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS5.8AI score
Exploits0References1
PyPA
PyPA
added 2022/09/06 11:15 p.m.9 views

PYSEC-2022-43149

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS7.3AI score0.00648EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/09/06 11:15 p.m.3 views

UBUNTU-CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

6.5CVSS5.8AI score0.00648EPSS
Exploits1References3
Rows per page
Query Builder