CVE-2024-45679 — Open Asset Import Library / Assimp

CVE-2024-45679

Open Asset Import Library / Assimp PUBLISHED

Description (CNA)

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

Affected (CNA)

Vendor / product	Versions
Open Asset Import Library / Assimp	affected prior to 5.4.3

CWE

No CWE identifiers supplied.

References

https://github.com/assimp/assimp/releases/tag/v5.4.3
https://jvn.jp/en/jp/JVN42386607/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.