PT-2023-35716 · Assimp · Assimp

Published

2023-03-19

·

Updated

2023-03-19

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Assimp (affected versions not specified)
Description The issue is related to a crash in the Assimp library, specifically in the SMDImporter component. The crash occurs when parsing node information, nodes section, or the file itself, as indicated by the functions Assimp::SMDImporter::ParseNodeInfo, Assimp::SMDImporter::ParseNodesSection, and Assimp::SMDImporter::ParseFile.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

OSV-2023-201

Affected Products

Assimp