CVE-2024-48426: Medium severity assimp vulnerability
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address (0x1000c9714971).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-48426?
CVE-2024-48426 has a high severity rating due to the potential for a segmentation fault leading to application crashes.
How do I fix CVE-2024-48426?
To fix CVE-2024-48426, upgrade to the latest version of the Assimp library where the vulnerability has been addressed.
Which versions of Assimp are affected by CVE-2024-48426?
CVE-2024-48426 affects Assimp version 5.4.3.
What causes the CVE-2024-48426 vulnerability?
The vulnerability is caused by a segmentation fault in the SortByPTypeProcess::Execute function leading to invalid memory access.
How can I mitigate the risks associated with CVE-2024-48426?
Mitigation strategies include applying the fix through updates and implementing memory safety practices in your application.