Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/assimp@5.2.5
purl pkg:generic/assimp@5.2.5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
OSV-2022-1129

UNKNOWN WRITE in Assimp::ObjFileMtlImporter::getFloatValue OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=52935 ``` Crash type: UNKNOWN WRITE Crash state: Assimp::ObjFileMtlImporter::getFloatValue Assimp::ObjFileMtlImporter::load Assimp::ObjFileMtlImporter::ObjFileMtlImporter ``` There are no reported fixed by versions.
OSV-2022-1258

Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187 ``` Crash type: Heap-buffer-overflow WRITE 12 Crash state: Assimp::ObjFileImporter::createVertexArray Assimp::ObjFileImporter::createTopology Assimp::ObjFileImporter::createNodes ``` There are no reported fixed by versions.
OSV-2022-624

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=49422 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2023-201

UNKNOWN READ in Assimp::SMDImporter::ParseNodeInfo OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57218 ``` Crash type: UNKNOWN READ Crash state: Assimp::SMDImporter::ParseNodeInfo Assimp::SMDImporter::ParseNodesSection Assimp::SMDImporter::ParseFile ``` There are no reported fixed by versions.
OSV-2023-276

Heap-use-after-free in aiScene::~aiScene OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=57656 ``` Crash type: Heap-use-after-free READ 8 Crash state: aiScene::~aiScene Assimp::BatchLoader::~BatchLoader Assimp::LWSImporter::InternReadFile ``` There are no reported fixed by versions.
OSV-2023-536

Heap-buffer-overflow in Assimp::MD5::MD5Parser::ParseHeader OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60274 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5Parser::ParseHeader Assimp::MD5::MD5Parser::MD5Parser Assimp::MD5Importer::LoadMD5MeshFile ``` There are no reported fixed by versions.
OSV-2024-1220

UNKNOWN READ in Assimp::NDOImporter::InternReadFile OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 ``` Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile ``` There are no reported fixed by versions.
This package is not known to fix any advisories.