Submit #517817: Open Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflowinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflow
DescriptionHeap-based Buffer Overflow in AI_MD5_PARSE_STRING_IN_QUOTATION. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed MD5 file.
Source⚠️ https://github.com/assimp/assimp/issues/6019
User
 d3ng03 (UID 82651)
Submission03/11/2025 04:47 (1 Year ago)
Moderation03/24/2025 17:49 (14 days later)
StatusAccepted
VulDB entry300862 [Open Asset Import Library Assimp 5.4.3 MD5 File MD5Parser.cpp AI_MD5_PARSE_STRING_IN_QUOTATION data heap-based overflow]
Points17

Want to know what is going to be exploited?

We predict KEV entries!