Threats tagged 'ghsa-jr35-9ffc-pmf8'

Assimp versions through 6.0.5 have an integer overflow vulnerability in the MD2Importer::ValidateHeader() function. This flaw allows attackers to craft malicious .md2 files with manipulated header fields that bypass frame table bounds checks. Exploiting this can cause heap out-of-bounds reads, potentially crashing applications or exposing adjacent heap memory.