Submit #542246: Open Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflowinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflow
DescriptionHeap-based Buffer Overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed LWO file.
Source⚠️ https://github.com/assimp/assimp/issues/6023
User
 d3ng03 (UID 82651)
Submission03/25/2025 02:49 (1 Year ago)
Moderation04/03/2025 08:54 (9 days later)
StatusAccepted
VulDB entry303104 [Open Asset Import Library Assimp 5.4.3 LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow]
Points17

Do you want to use VulDB in your project?

Use the official API to access entries easily!