Medium severity5.5NVD Advisory· Published Jan 1, 2022· Updated Jun 17, 2026

CVE-2021-45948

Description

Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Assimp/Assimp2 versions
cpe:2.3:a:assimp:assimp:5.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:assimp:assimp:5.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:assimp:assimp:5.1.1:*:*:*:*:*:*:*
Open Asset Import Library/Open Asset Import Librarydescription
Open Asset Import Library/assimpllm-create
Range: 5.1.0 - 5.1.1

Patches

Vulnerability mechanics

References

bugs.chromium.org/p/oss-fuzz/issues/detailnvdExploitIssue TrackingThird Party Advisory
github.com/google/oss-fuzz-vulns/blob/main/vulns/assimp/OSV-2021-775.yamlnvdThird Party Advisory
security.gentoo.org/glsa/202210-01nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000