| Titre | Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read |
|---|
| Description | There exist multiple heap OOB reads in LWOImporter::CountVertsAndFacesLWO2. The code assumes that the end pointer is 2-bytes aligned, which it fails to check. Also the code is missing additional checks whether the accessed fields are inside of the heap buffer. |
|---|
| La source | ⚠️ https://github.com/assimp/assimp/issues/6173 |
|---|
| Utilisateur | Anonymous User |
|---|
| Soumission | 15/05/2025 10:03 (il y a 12 mois) |
|---|
| Modérer | 26/05/2025 15:03 (11 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 310290 [Open Asset Import Library Assimp 5.4.3 LWOLoader.cpp CountVertsAndFacesLWO2 divulgation d'information] |
|---|
| Points | 18 |
|---|