{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2024-46632"],"ecosystem":"PyPI","epss":0.00468,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGMZ42BW7AV95A1M8CM5CF","modified_at":"2026-05-21T15:00:25.876832635Z","published_at":"2024-09-26T16:15:08.783Z","references":["https://osv.dev/vulnerability/PYSEC-2024-291","https://github.com/assimp/assimp/issues/5771"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"PYSEC-2024-291","url":"https://osv.dev/vulnerability/PYSEC-2024-291"}],"summary":"Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function."}