| 제목 | Assimp commit 17c12da Heap-based Buffer Overflow |
|---|
| 설명 | A heap-buffer-overflow vulnerability exists in Assimp's X File parser within the Assimp::Compression::decompressBlock() function at Compression.cpp:188, which triggers an invalid memory read operation in zlib's inflate logic at inflate.c:1077. The flaw occurs due to insufficient validation of malformed compressed data during file decompression. The XFileImporter allocates a fixed-size heap buffer based on the target file size, and directly passes the entire unvalidated buffer to the zlib decompression routine. Malformed crafted X file data can falsely indicate additional available input bytes beyond the bounds of the allocated buffer. The zlib inflate function continues to read memory past the end of the valid heap buffer, resulting in out-of-bounds memory access. This vulnerability can cause application crash and memory corruption; remote attackers can exploit this flaw via a maliciously crafted X file to trigger a denial-of-service (DoS) condition. |
|---|
| 원천 | ⚠️ https://github.com/assimp/assimp/issues/6624 |
|---|
| 사용자 | TYGLS (UID 94774) |
|---|
| 제출 | 2026. 06. 29. PM 02:42 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 16. AM 09:50 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 391144 [Open Asset Import Library Assimp 17c12da File Parser Compression.cpp decompressBlock 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|