Threats tagged 'ghsa-xqmq-hm32-g484'

Assimp versions through 6.0.6 have a path traversal vulnerability in the glTF and glTF2 importers. This flaw allows attackers to craft buffer URI values containing '..' segments or absolute paths, enabling them to read arbitrary local files such as /etc/passwd by importing malicious glTF models. The vulnerability has a medium severity rating with a CVSS score of 5.5.