Soumettre #578001: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinformation

TitreOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exists a heap OOB read in MDCImporter::InternReadFile. The code fails to check whether the calculated location of `pcVerts` is still inside of the file. This can be used to crash the program using a crafted MDC file.
La source⚠️ https://github.com/assimp/assimp/issues/6168
Utilisateur
 Anonymous User
Soumission15/05/2025 09:52 (il y a 12 mois)
Modérer25/05/2025 15:14 (10 days later)
StatutAccepté
Entrée VulDB310254 [Open Asset Import Library Assimp 5.4.3 MDC File Parser MDCLoader.cpp InternReadFile pcVerts divulgation d'information]
Points17

Want to know what is going to be exploited?

We predict KEV entries!