Submit #578006: Open Asset Import Library Assimp 5.4.3 Heap Out of Bounds Readinfo

TitleOpen Asset Import Library Assimp 5.4.3 Heap Out of Bounds Read
DescriptionThere exist multiple heap OOB reads in LWOImporter::CountVertsAndFacesLWO2. The code assumes that the end pointer is 2-bytes aligned, which it fails to check. Also the code is missing additional checks whether the accessed fields are inside of the heap buffer.
Source⚠️ https://github.com/assimp/assimp/issues/6173
User
 Anonymous User
Submission05/15/2025 10:03 (11 months ago)
Moderation05/26/2025 15:03 (11 days later)
StatusAccepted
VulDB entry310290 [Open Asset Import Library Assimp 5.4.3 LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds]
Points18

Do you want to use VulDB in your project?

Use the official API to access entries easily!