CVE-2024-40724

Опубликовано: 19 июл. 2024

Источник: nvd

CVSS3: 7.8

CVSS3: 8.4

EPSS Низкий

Описание

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.

Ссылки

https://github.com/assimp/assimp/pull/5651/commits/614911bb3b1bfc3a1799ae2b3cca306270f3fb97
Patch
https://github.com/assimp/assimp/releases/tag/v5.4.2
Release Notes
https://jvn.jp/en/jp/JVN87710540/
Third Party Advisory
https://github.com/assimp/assimp/pull/5651/commits/614911bb3b1bfc3a1799ae2b3cca306270f3fb97
Patch
https://github.com/assimp/assimp/releases/tag/v5.4.2
Release Notes
https://jvn.jp/en/jp/JVN87710540/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*

Версия до 5.4.2 (исключая)

EPSS

Процентиль: 20%

0.00281

Низкий

7.8 High

CVSS3

8.4 High

CVSS3

Дефекты

CWE-787

CWE-120

Связанные уязвимости

CVE-2024-40724

CVSS3: 7.8

ubuntu

около 2 лет назад

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.

CVE-2024-40724

CVSS3: 7.8

debian

около 2 лет назад

Heap-based buffer overflow vulnerability in Assimp versions prior to 5 ...

openSUSE-SU-2024:0225-1

suse-cvrf

около 2 лет назад

Security update for assimp

SUSE-SU-2024:3079-1

suse-cvrf

почти 2 года назад

Security update for libqt5-qt3d

SUSE-SU-2024:3078-1

suse-cvrf

почти 2 года назад

Security update for libqt5-qtquick3d

EPSS

Процентиль: 20%

0.00281

Низкий

7.8 High

CVSS3

8.4 High

CVSS3

Дефекты

CWE-787

CWE-120