Submit #542247: Open Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflowinfo

TitleOpen Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflow
DescriptionHeap-based Buffer Overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed ASE file.
Source⚠️ https://github.com/assimp/assimp/issues/6024
User
 d3ng03 (UID 82651)
Submission03/25/2025 02:49 (1 Year ago)
Moderation04/03/2025 08:54 (9 days later)
StatusAccepted
VulDB entry303105 [Open Asset Import Library Assimp 5.4.3 ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow]
Points17

Want to know what is going to be exploited?

We predict KEV entries!