PyPI/pyassimp CVE-2024-48423: high 7.8, EPSS 0.26%

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-120
• https://github.com/assimp/assimp/issues/5788

CVE-2024-48423 · published 2024-10-24T21:15:00Z · modified 2024-11-05T20:57:07.989666Z · JSON