Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper).
"https://github.com/pypa/advisory-database/blob/main/vulns/pyassimp/PYSEC-2022-43148.yaml"