CVE-2021-45948: Buffer Overflow
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in m3dsafestr (called from m3dload and Assimp::M3DWrapper::M3DWrapper).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Open Asset Import Library (assimp) heap-based buffer overflow?
The vulnerability ID for the Open Asset Import Library (assimp) heap-based buffer overflow is CVE-2021-45948.
What is the severity of CVE-2021-45948?
The severity of CVE-2021-45948 is medium, with a severity value of 5.5.
Which versions of assimp are affected by CVE-2021-45948?
Versions 5.1.0 and 5.1.1 of assimp are affected by CVE-2021-45948.
How can I fix the heap-based buffer overflow vulnerability in assimp?
To fix the heap-based buffer overflow vulnerability in assimp, it is recommended to update to a patched version of assimp, if available.
Where can I find more information about CVE-2021-45948?
You can find more information about CVE-2021-45948 in the following references: [link1](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=34416), [link2](https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2021-775.yaml), [link3](https://security.gentoo.org/glsa/202210-01).