PT-2025-13833 · Assimp+2 · Assimp+2
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Open Asset Import Library Assimp version 5.4.3
Description
A critical issue has been found in the ASE File Handler component of the Open Asset Import Library Assimp. This issue affects the
Assimp::ASEImporter::BuildUniqueRepresentation function in the file ASELoader.cpp. The manipulation of the mIndices argument leads to an out-of-bounds read. It is possible to initiate the attack remotely.Recommendations
For Open Asset Import Library Assimp version 5.4.3, upgrade to version 6.0 to address this issue. As a temporary workaround, consider restricting access to the
ASELoader.cpp file or the Assimp::ASEImporter::BuildUniqueRepresentation function until the patch is applied. Apply the patch named 7c705fde418d68cca4e8eff56be01b2617b0d6fe to fix this issue.Exploit
Fix
DoS
Out of bounds Read
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Assimp
Debian
Red Os