Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/assimp@5.2.1
purl pkg:generic/assimp@5.2.1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (10)
Advisory Summary Fixed in package version
OSV-2021-1641

Heap-buffer-overflow in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=41582 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch void … There are no reported fixed by versions.
OSV-2022-1258

Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 ``` Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes ``` There are no reported fixed by versions.
OSV-2022-194

Heap-buffer-overflow in SuperFastHash OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked There are no reported fixed by versions.
OSV-2022-21

Heap-buffer-overflow in Assimp::IOSystem2Unzip::opendisk OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=43414 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::IOSystem2Unzip::opendisk call_zopendisk64 unzOpenCurrentFile3 ``` There are no reported fixed by versions.
OSV-2022-410

Heap-buffer-overflow in Assimp::ASE::Parser::ParseLV1SoftSkinBlock OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47392 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::ASE::Parser::ParseLV1SoftSkinBlock Assimp::ASE::Parser::Parse Assimp::ASEImporter::InternReadFile ``` There are no reported fixed by versions.
OSV-2022-624

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2023-201

UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 ``` Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile ``` There are no reported fixed by versions.
OSV-2023-276

Heap-use-after-free in aiScene::~aiScene OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57656 ``` Crash type: Heap-use-after-free READ 8 Crash state: aiScene::~aiScene Assimp::BatchLoader::~BatchLoader Assimp::LWSImporter::InternReadFile ``` There are no reported fixed by versions.
OSV-2023-536

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2024-1220

UNKNOWN READ in Assimp::NDOImporter::InternReadFile OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 ``` Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile ``` There are no reported fixed by versions.
This package is not known to fix any advisories.