CVE-2024-48425: Medium severity assimp vulnerability
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcessTriangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a null or invalid pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48425?
CVE-2024-48425 has been categorized with a severity level that indicates a potential crash due to a segmentation fault in the Assimp library.
How do I fix CVE-2024-48425?
To mitigate CVE-2024-48425, it is recommended to upgrade to the latest version of the Assimp library where the vulnerability has been addressed.
What versions of Assimp are affected by CVE-2024-48425?
CVE-2024-48425 affects the Assimp library but specific version details should be checked in the release notes or vulnerability advisories.
What are the implications of CVE-2024-48425 for my application?
CVE-2024-48425 can lead to application crashes, potentially impacting availability and reliability if the Assimp library is utilized.
Is CVE-2024-48425 related to other vulnerabilities in the Assimp library?
CVE-2024-48425 may share characteristics with other vulnerabilities in Assimp, particularly those related to memory access violations during processing.