Threats tagged 'ghsa-3ch3-4xc5-mvqr'

Assimp versions up to 6.0.6 have a heap out-of-bounds read vulnerability in the MD2Importer::InternReadFile function. This flaw allows attackers to read beyond the allocated file buffer by exploiting an unvalidated frameSize header field in crafted .md2 files. The vulnerability can lead to application crashes or leakage of adjacent heap memory into the imported mesh data.