Threats tagged 'ghsa-4wfg-wh54-rm56'

Assimp versions up to 6.0.6 have a heap out-of-bounds read vulnerability in the glTFCommon::Util::ParseDataURI function. This flaw arises from storing a data offset in a signed char, allowing crafted glTF files with raw data URIs starting beyond byte 127 to cause crashes or leak adjacent heap memory.