Threat database

A buffer overflow vulnerability exists in the Open Asset Import Library Assimp, specifically in the function Assimp::MDLImporter::ParseBoneTrafoKeys_3DGS_MDL7 within the 3DGS MDL7 Bone Transformation Key Parser component. The flaw arises from improper handling of the arguments transmatrix_count and pcBoneTransforms, which can be manipulated remotely to trigger the overflow. A patch identified by commit 50d767984e78d51b53e2020fdf0967fd624bc377 is available to address this issue. The vulnerability has a medium severity rating with a CVSS score of 5.3. Public disclosure of the exploit exists, but no known active exploitation in the wild has been reported.