| शीर्षक | Assimp commit 17c12da Heap-based Buffer Overflow |
|---|
| विवरण | A heap-buffer-overflow vulnerability exists in Assimp's X File parser within the Assimp::Compression::decompressBlock() function at Compression.cpp:188, which triggers an invalid memory read operation in zlib's inflate logic at inflate.c:1077. The flaw occurs due to insufficient validation of malformed compressed data during file decompression. The XFileImporter allocates a fixed-size heap buffer based on the target file size, and directly passes the entire unvalidated buffer to the zlib decompression routine. Malformed crafted X file data can falsely indicate additional available input bytes beyond the bounds of the allocated buffer. The zlib inflate function continues to read memory past the end of the valid heap buffer, resulting in out-of-bounds memory access. This vulnerability can cause application crash and memory corruption; remote attackers can exploit this flaw via a maliciously crafted X file to trigger a denial-of-service (DoS) condition. |
|---|
| स्रोत | ⚠️ https://github.com/assimp/assimp/issues/6624 |
|---|
| उपयोगकर्ता | TYGLS (UID 94774) |
|---|
| सबमिशन | 29/06/2026 02:42 PM (2 महीनों पहले) |
|---|
| संयम | 16/08/2026 09:50 AM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 391144 [Open Asset Import Library Assimp 17c12da File Parser Compression.cpp decompressBlock बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|