CVE-2024-45679

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.

Score

CVSS 3.1 8.4 High

Status

Analyzed - vultures@jpcert.or.jp

Published

2024-09-18

Last modified

2024-09-18

Weaknesses

CWE-122

Affected products

• Assimp (Assimp)
• Assimp (Open Asset Import Library)

References

• https://github.com/assimp/assimp/releases/tag/v5.4.3
• https://jvn.jp/en/jp/JVN42386607/