Submit #578003: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitleOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exists a heap OOB read in MDLImporter::ImportUVCoordinate_3DGS_MDL345. pcHeader->synctype is not checked correctly allowing for negative values. This enables OOB accesses, which could potentially also be used to crash the program.
Source⚠️ https://github.com/assimp/assimp/issues/6170
User
 Anonymous User
Submission05/15/2025 09:57 (11 months ago)
Moderation05/25/2025 15:14 (10 days later)
StatusAccepted
VulDB entry310256 [Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 iIndex out-of-bounds]
Points17

Interested in the pricing of exploits?

See the underground prices here!