Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/assimp@6.0.3
purl pkg:generic/assimp@6.0.3
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (10)
Advisory Summary Fixed in package version
OSV-2023-869

Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile ``` There are no reported fixed by versions.
OSV-2024-1220

UNKNOWN READ in Assimp::NDOImporter::InternReadFile OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 ``` Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile ``` There are no reported fixed by versions.
OSV-2025-280

Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob ``` There are no reported fixed by versions.
OSV-2025-580

UNKNOWN READ in signed char Assimp::StreamReader<false, false>::Get<signed char> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=434414094 ``` Crash type: UNKNOWN READ Crash state: signed char … There are no reported fixed by versions.
OSV-2025-965

Stack-use-after-scope in Assimp::FBX::FBXExportProperty::FBXExportProperty OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=465494996 ``` Crash type: Stack-use-after-scope READ 1 Crash state: Assimp::FBX::FBXExportProperty::FBXExportProperty Assimp::FBX::FBXExportProperty* std::__1::vector<Assimp::FBX::FBXExportProperty, Assimp::FBXExporter::WriteObjects ``` There are no reported fixed by versions.
OSV-2026-229

Segv on unknown address in aiAnimation::~aiAnimation OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=483188619 ``` Crash type: Segv on unknown address Crash state: aiAnimation::~aiAnimation aiScene::~aiScene … There are no reported fixed by versions.
OSV-2026-344

UNKNOWN READ in void Assimp::Blender::ConvertDispatcher<float> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=488752792 ``` Crash type: UNKNOWN READ Crash state: void Assimp::Blender::ConvertDispatcher<float> void Assimp::Blender::Structure::ReadFieldArray<2, float, … There are no reported fixed by versions.
OSV-2026-505

UNKNOWN READ in unsigned int Assimp::StreamReader<true, true>::Get<unsigned int> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=498284131 ``` Crash type: UNKNOWN READ Crash state: unsigned int … There are no reported fixed by versions.
OSV-2026-521

UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 ``` Crash type: UNKNOWN READ Crash state: unsigned long … There are no reported fixed by versions.
OSV-2026-74

Heap-buffer-overflow in ___interceptor_strtol OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=476180586 ``` Crash type: Heap-buffer-overflow READ 3 Crash state: ___interceptor_strtol Assimp::ObjFileParser::getFace Assimp::ObjFileParser::parseFile ``` There are no reported fixed by versions.
This package is not known to fix any advisories.