| Название | Assimp commit 17c12da Heap-based Buffer Overflow |
|---|
| Описание | A heap-buffer-overflow vulnerability exists in Assimp's 3DGS MDL file parser within the Assimp::MDLImporter::ParseSkinLump_3DGS_MDL7() function at MDLMaterialLoader.cpp:772. The flaw is caused by insufficient pointer boundary validation when parsing malicious MDL model files. During the parsing of skin lump data, the program increments the read pointer continuously by fixed offset values without verifying whether the pointer exceeds the boundary of the allocated heap buffer before recursive function calls. A specially crafted MDL file can make the read pointer go beyond the valid buffer range, causing the program to illegally read 4 bytes of out-of-bounds heap memory. This memory corruption vulnerability can trigger program crash, and remote attackers can exploit this flaw via a malicious MDL file to launch denial-of-service (DoS) attacks. |
|---|
| Источник | ⚠️ https://github.com/assimp/assimp/issues/6629 |
|---|
| Пользователь | TYGLS (UID 94774) |
|---|
| Представление | 29.06.2026 14:44 (2 месяцы назад) |
|---|
| Модерация | 16.08.2026 09:50 (2 months later) |
|---|
| Статус | Дубликат |
|---|
| Запись VulDB | 310293 [Open Asset Import Library Assimp 5.4.3 MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 раскрытие информации] |
|---|
| Баллы | 0 |
|---|