Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-r3jq-f86p-w9jr

Опубликовано: 17 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 6.3

Описание

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 27%
0.00341
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 6.3
redhat
5 дней назад

A flaw was found in Open Asset Import Library Assimp. A heap-based buffer overflow vulnerability exists in the `AddBonesToNodeGraph_3DGS_MDL7` function within the Node Parser component. This flaw can be triggered remotely by manipulating the `bones_num` argument. Successful exploitation could lead to memory corruption, potentially resulting in a denial of service or other unspecified impacts.

CVSS3: 6.3
nvd
5 дней назад

A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS3: 6.3
debian
5 дней назад

A vulnerability was detected in Open Asset Import Library Assimp 17c12 ...

EPSS

Процентиль: 27%
0.00341
Низкий

2.1 Low

CVSS4

6.3 Medium

CVSS3

Дефекты

CWE-119