7 matches found
CVE-2025-50472
CVE-2025-50472 Уязвимость удаленного выполнения кода в ModelScope Ms-Swift ModelFileSystemCache из-за десериализации недоверенных данных RCE PoC Я загрузил репозиторий с вредоносным файлом .mdl в ModelScope для тестирования. Его можно использовать напрямую во время тестирования. Ссылка:...
OESA-2026-1658 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...
OESA-2026-1543 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability was found in Open...
Out-of-bounds Read
Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the MDLImporter::InternReadFile3DGSMDL345 function. An attacker can read data outside the intended buffer boundaries by manipulating the input data. This is only exploitable if the attacker has local access to...
OESA-2025-1405 assimp security update
Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability classified as critic...
CVE-2025-3016
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument...
CVE-2025-3016: Uncontrolled Resource Consumption
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument...