Описание
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| assimp | fixed | 5.4.2+ds-1 | package | |
| assimp | ignored | bookworm | package | |
| assimp | no-dsa | bullseye | package |
Примечания
https://github.com/assimp/assimp/commit/ddb74c2bbdee1565dda667e85f0c82a0588c8053 (v5.4.2)
EPSS
Процентиль: 27%
0.0009
Низкий
Связанные уязвимости
CVSS3: 7.8
ubuntu
12 месяцев назад
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.
CVSS3: 7.8
nvd
12 месяцев назад
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.
EPSS
Процентиль: 27%
0.0009
Низкий