OSV-2024-1372

See a problem?

Import Source

https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2024-1372.yaml

JSON Data

https://api.osv.dev/v1/vulns/OSV-2024-1372

Published

2024-12-14T00:00:14.982156Z

Modified

2024-12-14T00:00:14.982614Z

Summary

Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess

Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383595860

Crash type: Bad-cast
Crash state:
Bad-cast to Assimp::LogStream from Assimp::OptimizeMeshesProcess
CallbackToLogRedirector
Assimp::DefaultLogger::WriteToStreams

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=383595860

Affected packages

OSS-Fuzz / assimp

Package

Name: assimp
Purl: pkg:generic/assimp

Affected ranges

Type: GIT
Repo: https://github.com/assimp/assimp.git
Events: Introduced

4024726eca89331503bdab33d0b9186e901bbc45

Fixed

76d22e5fbe4bd54458a3a0a04d76ab4a22e7e117

Ecosystem specific

{
    "severity": "HIGH"
}

Database specific

{
    "fixed_range": "28ebc8452b4205aacbdbb6d1c32ab0da6d6bde56:76d22e5fbe4bd54458a3a0a04d76ab4a22e7e117"
}