OSV-2022-1129 UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter...

PT-2022-36735 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a crash in the Assimp library, specifically in the Assimp::ObjFileMtlImporter class. The crash occurs when the getFloatValue function is called, which is part of the...

The vulnerability in the implementation of the Assimp::XFileImporter::CreateMeshes() function of the Open Asset Import Library (Assimp) allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Assimp::XFileImporter::CreateMeshes implementation in the Open Asset Import Library Assimp is related to segmentation fault issues. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information...

GLSA-202210-01 : Open Asset Import Library (assimp): Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202210-01 Open Asset Import Library assimp: Multiple Vulnerabilities - Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...

ROS-20221017-02

The Open Asset Import Library Assimp 3D model import library vulnerability is related to a segmentation violation via the Assimp::XFileImporter::CreateMeshes component. segmentation via Assimp::XFileImporter::CreateMeshes component. Exploitation of the vulnerability could allow an attacker acting...

CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

DEBIAN-CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

Open redirect

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

PYSEC-2022-43149

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

UBUNTU-CVE-2022-38528

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

PYSEC-2022-43149

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

CVE-2022-38528

CVE-2022-38528 concerns the Open Asset Import Library (assimp). The connected records describe a segmentation violation in the code path Assimp::XFileImporter::CreateMeshes stemming from commit 3c253ca. The documents do not enumerate affected versions, blast vectors, or concrete mitigations; no e...

PT-2022-37400 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Open Asset Import Library assimp affected versions not specified Description: A segmentation violation was discovered in the Open Asset Import Library assimp via the component Assimp::XFileImporter::CreateMeshes. Recommendations: At the momen...

Out-of-bounds Read

Open Asset Import Library assimp commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes...

OSV-2022-624 Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile...

OSV-2022-410 Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile...

OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

OSV-2022-21 Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43414 Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::IOSystem2Unzip::opendisk callzopendisk64 unzOpenCurrentFile3...

CVE-2021-45948

Open Asset Import Library aka assimp 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr called from m3dload and Assimp::M3DWrapper::M3DWrapper...