Submit #524593: Open Asset Import Library Assimp >=5.4.3 Uncontrolled Memory Allocationinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Uncontrolled Memory Allocation
Descriptionout of memory in Assimp::MDLImporter::ParseTextureColorData. An attacker could potentially exploit the vulnerability to cause a denial of service, if they can trick the victim into running assimp on a malformed MDL file.
Source⚠️ https://github.com/assimp/assimp/issues/6022
User
 d3ng03 (UID 82651)
Submission03/21/2025 08:37 (1 Year ago)
Moderation03/31/2025 07:38 (10 days later)
StatusAccepted
VulDB entry302068 [Open Asset Import Library Assimp 5.4.3 MDL File MDLMaterialLoader.cpp ParseTextureColorData mWidth/mHeight resource consumption]
Points17

Do you need the next level of professionalism?

Upgrade your account now!