Submit #517785: Open Asset Import Library Assimp >=5.4.3 Out-of-Bounds Readinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Out-of-Bounds Read
DescriptionOut-of-bounds Read in Assimp::CSMImporter::InternReadFile. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed CSM file.
Source⚠️ https://github.com/assimp/assimp/issues/6012
User
 d3ng03 (UID 82651)
Submission03/11/2025 04:40 (1 Year ago)
Moderation03/24/2025 17:49 (14 days later)
StatusAccepted
VulDB entry300856 [Open Asset Import Library Assimp 5.4.3 CSM File CSMLoader.cpp InternReadFile na out-of-bounds]
Points17

Interested in the pricing of exploits?

See the underground prices here!