Threats tagged 'ghsa-f8x5-qxqq-cgrr'

Assimp versions through 6.0.6 have an integer overflow vulnerability in the OgreBinarySerializer::ReadSubMesh function. This flaw allows attackers to cause application crashes by providing specially crafted Ogre binary .mesh files with a large index count. The overflow causes a 32-bit buffer size wrap, leading to a segmentation fault during scene teardown.