CyberSecBulletin

Assimp vulnerabilities

We track 2 vulnerabilities in Assimp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2024.

2vulnerabilities
0critical
2high
0exploited
8.6average CVSS score

Latest Assimp vulnerabilities

  • 8.4 High severity

    Assimp: Heap-based Buffer Overflow

    CVE-2024-45679Open Asset Import Library

    Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

  • 8.8 High severity

    Assimp: Use After Free

    CVE-2022-45748Assimp

    An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.