Vulnerabilities > CVE-2024-40724 - Out-of-bounds Write vulnerability in Assimp

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

assimp

CWE-787

NVD

Published: 2024-07-19

Updated: 2024-11-21

Summary

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.

Vulnerable Configurations

Part	Description	Count
Application	Assimp Assimp Assimp 3.1 Assimp Assimp 3.1.1 Assimp Assimp 3.2 Assimp Assimp 3.3 Assimp Assimp 3.3.1 Assimp Assimp 4.0.0 Assimp Assimp 4.0.1 Assimp Assimp 4.1.0 Assimp Assimp 5.0.0 Assimp Assimp 5.0.1 Assimp Assimp 5.1.0 Assimp Assimp 5.1.1 Assimp Assimp 5.1.2 Assimp Assimp 5.1.3 Assimp Assimp 5.1.4 Assimp Assimp 5.1.5 Assimp Assimp 5.1.6 Assimp Assimp 5.2.0 Assimp Assimp 5.2.1 Assimp Assimp 5.2.5 Assimp Assimp 5.3.0 Assimp Assimp 5.3.1 Assimp Assimp 5.4.0 Assimp Assimp 5.4.1	30

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References