OSV-2025-965

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2025-965.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2025-965
Published
2025-12-04T00:10:11Z
Modified
2025-12-04T00:10:11Z
Summary
Stack-use-after-scope in Assimp::FBX::FBXExportProperty::FBXExportProperty
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=465494996

Crash type: Stack-use-after-scope READ 1
Crash state:
Assimp::FBX::FBXExportProperty::FBXExportProperty
Assimp::FBX::FBXExportProperty* std::__1::vector<Assimp::FBX::FBXExportProperty,
Assimp::FBXExporter::WriteObjects
References

Affected packages

OSS-Fuzz / assimp

Package

Name
assimp
Purl
pkg:generic/assimp

Affected ranges

Type
GIT
Repo
https://github.com/assimp/assimp.git
Events
Introduced
ac0cfc8d9cd2ebfa959053d822e4846a814cf053
Fixed
970f8691dd5e54bd7667438efe5f2cd8e261d199

Affected versions

Other
master
v6.*
v6.0.3
v6.0.4

Ecosystem specific 

{
    "severity": null
}

Database specific

source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2025-965.yaml"