Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-53vp-hv55-j8x4

Опубликовано: 26 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.2

Описание

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

EPSS

Процентиль: 7%
0.00029
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 6.2
ubuntu
7 месяцев назад

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

CVSS3: 6.2
redhat
7 месяцев назад

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

CVSS3: 6.2
nvd
7 месяцев назад

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

CVSS3: 6.2
debian
7 месяцев назад

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesA ...

CVSS3: 6.2
fstec
8 месяцев назад

Уязвимость функции SkipSpacesAndLineEnd кроссплатформенной библиотеки импорта 3D-моделей, Assimp (Open Asset Import Library), позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 7%
0.00029
Низкий

6.2 Medium

CVSS3

Дефекты

CWE-120