CVE-2024-48424

Name
CVE-2024-48424
Description
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
NVD Severity
medium
Other trackers
Mailing lists
Exploits
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
https://github.com/assimp/assimp/issues/5787

Match rules

CPE URI Source package Min version Max version
n/a == n/a == n/a
cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:* assimp >= 0 <= 5.4.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
assimp edge-community 5.4.3-r0 Russ Webber <russ@rw.id.au> possibly vulnerable
assimp 3.20-community 5.4.3-r0 Russ Webber <russ@rw.id.au> possibly vulnerable