CyberRota Analysis
AI-GeneratedA heap-based buffer overflow vulnerability exists in the Assimp library's MDLImporter function, specifically in the Node Parser component, which can be exploited remotely by manipulating the bones_num argument. This flaw could lead to arbitrary code execution or crashes, posing a risk to applications that utilize this library for 3D model importing. Developers and organizations using Assimp should prioritize patching or mitigating this vulnerability to safeguard their systems against potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was detected in Open Asset Import Library Assimp 17c12da. This affects the function Assimp::MDLImporter::AddBonesToNodeGraph_3DGS_MDL7 of the file code/AssetLib/MDL/MDLLoader.cpp of the component Node Parser. The manipulation of the argument bones_num results in heap-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.