CVE-2024-48423: Use After Free
Published Oct 24, 2024
·Updated
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
Affected Software
1 affected component
Assimp Assimp=5.4.3
Event History
Oct 24, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2024-48423?
CVE-2024-48423 is considered a high severity vulnerability due to the potential for arbitrary code execution.
2
How do I fix CVE-2024-48423?
To fix CVE-2024-48423, you should update the Assimp library to version 5.4.4 or later.
3
Who is affected by CVE-2024-48423?
CVE-2024-48423 affects users of the Assimp library version 5.4.3.
4
What kind of attack can be executed via CVE-2024-48423?
CVE-2024-48423 allows a local attacker to execute arbitrary code through the CallbackToLogRedirector function.
5
Is CVE-2024-48423 a local or remote vulnerability?
CVE-2024-48423 is a local vulnerability, requiring local access to exploit.