OSV-2023-385

    Dashboard / Vulnerabilities / OSV-2023-385

    OSV-2023-385

    Published: 9 May 2023Last Modified: 9 May 2023

    Summary: Bad-cast to Assimp::BaseImporter from invalid vptr

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724 ``` Crash type: Bad-cast Crash state: Bad-cast to Assimp::BaseImporter from invalid vptr Assimp::Importer::ReadFile Assimp::BatchLoader::LoadAll ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=58724

    Affected packages

    Package

    Name: assimp

    Purl: pkg:generic/assimp

    Affected ranges

    Type: GIT

    Events:

    Introduced- 7eb9edf0b9b3e761ee815cfc50b9b9efcab6d2f7
    Fixed -9f593d70b51f2b3a277cfb6b3f6ff614a1fc5f90

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-385 | CVE-DB