| タイトル | Assimp commit 17c12da Heap-based Buffer Overflow |
|---|
| 説明 | A heap-buffer-overflow vulnerability exists in Assimp's 3DGS MDL file parser within the Assimp::MDLImporter::ParseSkinLump_3DGS_MDL7() function at MDLMaterialLoader.cpp:772. The flaw is caused by insufficient pointer boundary validation when parsing malicious MDL model files. During the parsing of skin lump data, the program increments the read pointer continuously by fixed offset values without verifying whether the pointer exceeds the boundary of the allocated heap buffer before recursive function calls. A specially crafted MDL file can make the read pointer go beyond the valid buffer range, causing the program to illegally read 4 bytes of out-of-bounds heap memory. This memory corruption vulnerability can trigger program crash, and remote attackers can exploit this flaw via a malicious MDL file to launch denial-of-service (DoS) attacks. |
|---|
| ソース | ⚠️ https://github.com/assimp/assimp/issues/6629 |
|---|
| ユーザー | TYGLS (UID 94774) |
|---|
| 送信 | 2026年06月29日 14:44 (2 月 ago) |
|---|
| モデレーション | 2026年08月16日 09:50 (2 months later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 310293 [Open Asset Import Library Assimp 5.4.3 MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 情報漏えい] |
|---|
| ポイント | 0 |
|---|