Priority HIGH 73
An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00731 · Published 2023-01-20 · No fix listed CWE-416
Priority HIGH 72
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00255 · Published 2024-10-24 · No fix listed CWE-416
Priority MEDIUM 61
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.00303 · Published 2024-11-21 · No fix listed CWE-120
Priority MEDIUM 61
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer.
CVSS 3.1MEDIUM 6.2· Local · No auth · No interaction · EPSS 0.0023 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 58
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00239 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 58
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00224 · Published 2024-10-24 · No fix listed CWE-120
Priority MEDIUM 57
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00667 · Published 2025-03-31 · No fix listed CWE-400
Priority MEDIUM 57
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00514 · Published 2025-03-31 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00537 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00628 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00467 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00551 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00496 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0067 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00822 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00484 · Published 2025-03-25 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00741 · Published 2025-03-21 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0065 · Published 2025-03-21 · No fix listed CWE-369
Priority MEDIUM 57
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00526 · Published 2025-03-10 · No fix listed CWE-119
Priority MEDIUM 57
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00594 · Published 2025-03-10 · No fix listed CWE-119
Priority MEDIUM 55
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00198 · Published 2026-01-18 · No fix listed CWE-119
Priority MEDIUM 55
A weakness has been identified in Open Asset Import Library Assimp 6.0.2.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00249 · Published 2025-10-05 · Fixed CWE-119
Priority MEDIUM 55
A vulnerability was identified in Open Asset Import Library Assimp 6.0.2.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00252 · Published 2025-10-05 · No fix listed CWE-119
Priority MEDIUM 55
A vulnerability was determined in Open Asset Import Library Assimp 6.0.2.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.0021 · Published 2025-10-05 · Fix deferred CWE-400
Priority MEDIUM 55
A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3.
CVSS 4.0MEDIUM 4.8· Local · Low privileges · No interaction · EPSS 0.00265 · Published 2025-06-16 · Fix deferred CWE-119
Load more
THREATIST.IORead the docs