Astra Linux – Vulnerability in assimp

A issue was discovered with assimp 5.1.4. A use after free error occurred in the function ColladaParser::ExtractDataObjectFromChannel in the file /code/AssetLib/Collada/ColladaParser.cpp...

assimp:assimp_fuzzer_collada: Index-out-of-bounds in Assimp::ColladaParser::ExtractDataObjectFromChannel

Detailed Report: https://oss-fuzz.com/testcase?key=5618648789352448 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzercollada Job Type: libfuzzerubsanassimp Platform Id: linux Crash Type: Index-out-of-bounds Crash Address: Crash State:...

assimp:assimp_fuzzer_collada: Heap-buffer-overflow in Assimp::ColladaParser::CopyVertex

Detailed Report: https://oss-fuzz.com/testcase?key=4759306340990976 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzercollada Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7a5da91e0238 Crash State: Assimp::ColladaParser::CopyVertex...

EUVD-2023-0213

Malicious code in bioql PyPI...

ROS-20240807-01

Vulnerability in the implementation of ColladaParser::ExtractDataObjectFromChannel function of the Open Asset Import Library Assimp 3D models Open Asset Import Library Assimp is related to memory usage after release. Exploitation of the vulnerability could allow an attacker acting remotely to gai...

Use After Free

libassimp.so is vulnerable to Use After Free. The vulnerability is caused by a defect in a function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp which can lead to application crash resulting in Denial Of Service DOS...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

PYSEC-2023-290

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

Design/Logic Flaw

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

PT-2023-36077

Name of the Vulnerable Software and Affected Versions assimp version 5.1.4 Description A use after free issue was discovered in the function ColladaParser::ExtractDataObjectFromChannel located in the file /code/AssetLib/Collada/ColladaParser.cpp. Recommendations For assimp version 5.1.4, consider...

CVE-2022-45748

CVE-2022-45748 concerns an issue in the open-source library assimp 5.1.4 where a use-after-free occurs in ColladaParser::ExtractDataObjectFromChannel (file path: /code/AssetLib/Collada/ColladaParser.cpp). The connected sources confirm the vulnerability exists in this version of assimp and describ...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

Use After Free

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748: Use After Free

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...

CVE-2022-45748

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp...