Submit #578001: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitelOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
BeschreibungThere exists a heap OOB read in MDCImporter::InternReadFile. The code fails to check whether the calculated location of `pcVerts` is still inside of the file. This can be used to crash the program using a crafted MDC file.
Quelle⚠️ https://github.com/assimp/assimp/issues/6168
Benutzer
 Anonymous User
Einreichung15.05.2025 09:52 (vor 11 Monaten)
Moderieren25.05.2025 15:14 (10 days later)
StatusAkzeptiert
VulDB Eintrag310254 [Open Asset Import Library Assimp 5.4.3 MDC File Parser MDCLoader.cpp InternReadFile pcVerts Information Disclosure]
Punkte17

Do you know our Splunk app?

Download it now for free!