Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Assimp 3D Model Importer Crashes When Reading Invalid File
published 3 years ago
Summary
The Assimp 3D model importer can crash when processing certain types of malformed 3D model files. This can happen if a malicious or corrupted file is imported into the system. To avoid this issue, ensure that only trusted sources provide 3D model files, and consider implementing validation checks on incoming files.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| OSS-Fuzz | – | assimp | All versions |
Original advisory text
Heap-buffer-overflow in Assimp::MD5::MD5MeshParser::MD5MeshParser
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::MD5::MD5MeshParser::MD5MeshParser
Assimp::MD5Importer::LoadMD5MeshFile
Assimp::MD5Importer::InternReadFile
```
```
Crash type: Heap-buffer-overflow READ 1
Crash state:
Assimp::MD5::MD5MeshParser::MD5MeshParser
Assimp::MD5Importer::LoadMD5MeshFile
Assimp::MD5Importer::InternReadFile
```
References
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62441 Third Party Advisory
Timeline
Published17 Sep 2023
Updated6 Mar 2026
First seen6 Mar 2026
Track software like this
Free during beta