CVE-2024-53425: Medium severity assimp vulnerability
Published Nov 21, 2024
·Updated
A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.
Affected Software
2 affected components
Assimp Assimp
Assimp Assimp=5.4.3
Event History
Nov 21, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-53425?
CVE-2024-53425 is classified as a high severity vulnerability due to the potential for application crashes and out-of-bounds reads.
2
How do I fix CVE-2024-53425?
To fix CVE-2024-53425, update Assimp to version 5.4.4 or later, which contains a patch for this vulnerability.
3
What types of files are affected by CVE-2024-53425?
CVE-2024-53425 affects certain malformed MD5 model files when processed by Assimp.
4
What could happen if CVE-2024-53425 is exploited?
Exploitation of CVE-2024-53425 could lead to a crash of the application, potentially allowing for denial of service.
5
Which version of Assimp is vulnerable to CVE-2024-53425?
Assimp version 5.4.3 is vulnerable to CVE-2024-53425.