tocsin

CVE-2024-48425

1 advisory.

PyPI/pyassimp CVE-2024-48425: medium 5.5, EPSS 0.24%

A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due

Action: No fix published. Pin and monitor.

Affected

introducedfixedlast affected
0-5.4.3

Fixed versions

No fixed version in the source.

Sources

CVE-2024-48425 · published · modified · JSON