Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://github.com/assimp/assimp/releases/tag/v5.4.3 | Patch Release Notes |
| https://jvn.jp/en/jp/JVN42386607/ | Third Party Advisory |
Configurations
History
13 Jun 2025, 19:03
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Assimp assimp
Assimp |
|
| CPE | cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:* | |
| References | () https://jvn.jp/en/jp/JVN42386607/ - Third Party Advisory | |
| References | () https://github.com/assimp/assimp/releases/tag/v5.4.3 - Patch, Release Notes |
18 Sep 2024, 04:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-18 04:15
Updated : 2025-06-13 19:03
NVD link : CVE-2024-45679
Mitre link : CVE-2024-45679
JSON object : View
Products Affected
assimp
- assimp
CWE
No CWE.