CVE-2024-53425

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

CVSS v3.1

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.31% chance of exploitation in the next 30 days, 23th percentile

Published

2024-11-21

Updated

2024-11-26

Proof-of-concept exploits (1)

• assimp/assimp/issues/5860

References

• CVE Record
• NVD entry

Related

• CVE-2022-38528
• CVE-2022-45748
• CVE-2024-46632
• CVE-2024-48423
• CVE-2024-48424
• CVE-2024-48425