Priority HIGH 73
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00731 · Published 2023-01-20 · No fix listed CWE-416
Priority HIGH 72
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00255 · Published 2024-10-24 · No fix listed CWE-416
Priority MEDIUM 63
Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnimationKeyFrames() handling of unvalidated animation tra…
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00128 · Published 2026-10-15 · Fix deferred CWE-476
Priority MEDIUM 63
Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp.
CVSS 4.0MEDIUM 6.8· Local · No auth · User interaction · EPSS 0.00195 · Published 2026-10-15 · Fix deferred CWE-476
Priority MEDIUM 61
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00303 · Published 2024-11-21 · No fix listed CWE-120
Priority MEDIUM 61
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0023 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 58
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 58
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 57
A vulnerability was detected in Open Asset Import Library Assimp 17c12da.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00452 · Published 2026-08-17 · Fix deferred CWE-119
Priority MEDIUM 57
A security vulnerability has been detected in Open Asset Import Library Assimp 17c12da.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.005 · Published 2026-08-17 · Fix deferred CWE-119
Priority MEDIUM 57
A weakness has been identified in Open Asset Import Library Assimp 17c12da.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00368 · Published 2026-08-17 · Fix deferred CWE-119
Priority MEDIUM 57
A security flaw has been discovered in Open Asset Import Library Assimp 17c12da.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00452 · Published 2026-08-17 · Fix deferred CWE-119
Priority MEDIUM 57
A vulnerability was determined in Open Asset Import Library Assimp up to 6.0.4.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00233 · Published 2026-07-03 · Fix deferred CWE-119
Priority MEDIUM 57
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00667 · Published 2025-03-31 · No fix listed CWE-400
Priority MEDIUM 57
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00514 · Published 2025-03-31 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00537 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00628 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00467 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00551 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00496 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0067 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00822 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00484 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00741 · Published 2025-03-21 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0065 · Published 2025-03-21 · No fix listed CWE-369
Load more
THREATIST.IORead the docs