PyPI/pyassimp CVE-2024-46632: medium 4.3, EPSS 0.47%

Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function.

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2024-291
• https://github.com/assimp/assimp/issues/5771

CVE-2024-46632 · published 2024-09-26T16:15:08.783Z · modified 2026-05-21T15:00:25.876832635Z · JSON