Description (CNA)
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Open Asset Import Library / Assimp | affected prior to 5.4.2 |
CWE
No CWE identifiers supplied.
References
- https://github.com/assimp/assimp/releases/tag/v5.4.2
- https://github.com/assimp/assimp/pull/5651/commits/614911bb3b1bfc3a1799ae2b3cca306270f3fb97
- https://jvn.jp/en/jp/JVN87710540/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.