Submit #578006: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitelOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
BeschreibungThere exist multiple heap OOB reads in LWOImporter::CountVertsAndFacesLWO2. The code assumes that the end pointer is 2-bytes aligned, which it fails to check. Also the code is missing additional checks whether the accessed fields are inside of the heap buffer.
Quelle⚠️ https://github.com/assimp/assimp/issues/6173
Benutzer
 Anonymous User
Einreichung15.05.2025 10:03 (vor 11 Monaten)
Moderieren26.05.2025 15:03 (11 days later)
StatusAkzeptiert
VulDB Eintrag310290 [Open Asset Import Library Assimp 5.4.3 LWOLoader.cpp CountVertsAndFacesLWO2 Information Disclosure]
Punkte18

Want to stay up to date on a daily basis?

Enable the mail alert feature now!