| Titel | Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read |
|---|
| Beschreibung | There exists a heap OOB read in MDCImporter::InternReadFile. The code fails to check whether the calculated location of `pcVerts` is still inside of the file. This can be used to crash the program using a crafted MDC file. |
|---|
| Quelle | ⚠️ https://github.com/assimp/assimp/issues/6168 |
|---|
| Benutzer | Anonymous User |
|---|
| Einreichung | 15.05.2025 09:52 (vor 1 Jahr) |
|---|
| Moderieren | 25.05.2025 15:14 (10 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 310254 [Open Asset Import Library Assimp 5.4.3 MDC File Parser MDCLoader.cpp InternReadFile pcVerts Information Disclosure] |
|---|
| Punkte | 17 |
|---|