PT-2022-37400 · Assimp · Assimp

Published 2022-09-06 · Updated 2022-09-06

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Open Asset Import Library (assimp) (affected versions not specified)

Description A segmentation violation was discovered in the Open Asset Import Library (assimp) via the component Assimp::XFileImporter::CreateMeshes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

PYSEC-2022-43149

Affected Products

Assimp

References · 2

• https://osv.dev/vulnerability/PYSEC-2022-43149 · Vendor Advisory
• https://github.com/assimp/assimp/issues/4662 · Note