Vulnerability of the Assimp::MDLImporter::ParseTextureColorData() function (code/AssetLib/MDL/MDLMaterialLoader.cpp). This is a part of the Open Asset Import Library (Assimp) 3D model import library, which allows an attacker to trigger a denial-of-service attack.

The vulnerability of the Assimp::MDLImporter::ParseTextureColorData function code/AssetLib/MDL/MDLMaterialLoader.cpp in the Open Asset Import Library Assimp is related to an uncontrolled resource consumption when processing the parameters mWidth/mHeight. Exploiting this vulnerability could allow ...