Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-111128 →

DEBIAN-CVE-2026-111128

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalida...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices in OgreStructs.cpp. Attackers can supply a crafted .mesh and .skeleton file referencing a missing bone, causing BoneById() to return null and crash the host process.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 assimp

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Références

advisory security-tracker.debian.org