Submit #517817: Open Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflowinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflow
DescriptionHeap-based Buffer Overflow in AI_MD5_PARSE_STRING_IN_QUOTATION. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed MD5 file.
Source⚠️ https://github.com/assimp/assimp/issues/6019
User
 d3ng03 (UID 82651)
Submission03/11/2025 04:47 AM (3 months ago)
Moderation03/24/2025 05:49 PM (14 days later)
StatusAccepted
VulDB Entry300862 [Open Asset Import Library Assimp 5.4.3 MD5 File MD5Parser.cpp AI_MD5_PARSE_STRING_IN_QUOTATION data heap-based overflow]
Points17

Do you want to use VulDB in your project?

Use the official API to access entries easily!