Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CVE-2024-53425
Summary
A Heap-based Buffer Overflow vulnerability was discovered in the "SkipSpacesAndLineEnd" function in Assimp versions prior to 6.0.0. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.
- LOW
- LOCAL
- NONE
- UNCHANGED
- NONE
- NONE
- NONE
- HIGH
CWE-120 - Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The program copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.
References
Advisory Timeline
- Published
