Threats tagged 'oesa-2026-4449'

A buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) in the function Assimp::MDLImporter::GenerateOutputMeshes_3DGS_MDL7. The vulnerability arises because the code copies an input buffer to an output buffer without verifying that the input size is less than the output buffer size. This flaw can be remotely exploited, potentially impacting the integrity and availability of the affected system. The vulnerability has been publicly disclosed, but no patch or official fix has been announced yet.