Threats tagged 'ghsa-r3jc-f37h-j289'

A critical buffer overflow vulnerability exists in Assimp up to version 6.0.2 within the FBX Importer component. The flaw arises in the aiMaterial::AddBinaryProperty function, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without length validation, leading to potential memory corruption.