Submit #578001: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitleOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exists a heap OOB read in MDCImporter::InternReadFile. The code fails to check whether the calculated location of `pcVerts` is still inside of the file. This can be used to crash the program using a crafted MDC file.
Source⚠️ https://github.com/assimp/assimp/issues/6168
User
 Anonymous User
Submission05/15/2025 09:52 (11 months ago)
Moderation05/25/2025 15:14 (10 days later)
StatusAccepted
VulDB entry310254 [Open Asset Import Library Assimp 5.4.3 MDC File Parser MDCLoader.cpp InternReadFile pcVerts out-of-bounds]
Points17

Want to stay up to date on a daily basis?

Enable the mail alert feature now!