Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-345v-qrhv-w227

Опубликовано: 25 мар. 2025
Источник: github
Github: Не прошло ревью
CVSS4: 5.3
CVSS3: 4.3

Описание

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 65%
0.00485
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 4.3
ubuntu
11 месяцев назад

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.3
nvd
11 месяцев назад

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 4.3
debian
11 месяцев назад

A vulnerability has been found in Open Asset Import Library Assimp 5.4 ...

EPSS

Процентиль: 65%
0.00485
Низкий

5.3 Medium

CVSS4

4.3 Medium

CVSS3

Дефекты

CWE-119