Submit #578005: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitleOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exist multiple heap OOB reads in MDLImporter::InternReadFile_Quake1. The code fails to check whether the accessed fields are still within the boundaries of the heap buffer.
Source⚠️ https://github.com/assimp/assimp/issues/6172
User
 Anonymous User
Submission05/15/2025 10:01 (11 months ago)
Moderation05/26/2025 15:03 (11 days later)
StatusAccepted
VulDB entry310289 [Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp InternReadFile_Quake1 out-of-bounds]
Points16

Want to know what is going to be exploited?

We predict KEV entries!