Soumettre #524593: Open Asset Import Library Assimp >=5.4.3 Uncontrolled Memory Allocationinformation

TitreOpen Asset Import Library Assimp >=5.4.3 Uncontrolled Memory Allocation
Descriptionout of memory in Assimp::MDLImporter::ParseTextureColorData. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running assimp on a malformed MDL file.
La source⚠️ https://github.com/assimp/assimp/issues/6022
Utilisateur
 d3ng03 (UID 82651)
Soumission21/03/2025 08:37 (il y a 2 ans)
Modérer31/03/2025 07:38 (10 days later)
StatutAccepté
Entrée VulDB302068 [Open Asset Import Library Assimp 5.4.3 MDL File MDLMaterialLoader.cpp ParseTextureColorData mWidth/mHeight déni de service]
Points17

Want to know what is going to be exploited?

We predict KEV entries!