Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalida...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById() to return null and crash the host process.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

参照URL

advisory security-tracker.debian.org