tocsin

CVE-2024-48424

1 advisory.

PyPI/pyassimp CVE-2024-48424: medium 5.5, EPSS 0.22%

A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-5.4.3

Fixed versions

No fixed version in the source.

Sources

CVE-2024-48424 · published · modified · JSON