CVE-2025-6119
Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free
概要
Open Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2025-6119 assimp
- Ubuntu UBUNTU-CVE-2025-6119 assimp
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report github.com
- report vuldb.com
- report github.com