Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/assimp@5.1.3
purl pkg:generic/assimp@5.1.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
OSV-2021-1641

Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch void … There are no reported fixed by versions.
OSV-2022-410

Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile ``` There are no reported fixed by versions.
OSV-2022-624

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2023-201

UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 ``` Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile ``` There are no reported fixed by versions.
OSV-2023-536

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2024-1220

UNKNOWN READ in Assimp::NDOImporter::InternReadFile OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 ``` Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile ``` There are no reported fixed by versions.
This package is not known to fix any advisories.