Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:generic/assimp@6.0.5
purl pkg:generic/assimp@6.0.5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
OSV-2023-869

Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 ``` Crash type: Heap-buffer-overflow READ 1 Crash state: Assimp::MD5::MD5MeshParser::MD5MeshParser Assimp::MD5Importer::LoadMD5MeshFile Assimp::MD5Importer::InternReadFile ``` There are no reported fixed by versions.
OSV-2024-1220

UNKNOWN READ in Assimp::NDOImporter::InternReadFile OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 ``` Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile ``` There are no reported fixed by versions.
OSV-2025-280

Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 ``` Crash type: Heap-buffer-overflow READ {*} Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob ``` There are no reported fixed by versions.
OSV-2026-521

UNKNOWN READ in unsigned long Assimp::StreamReader<true, true>::Get<unsigned long> OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=499121788 ``` Crash type: UNKNOWN READ Crash state: unsigned long … There are no reported fixed by versions.
This package is not known to fix any advisories.