High severity7.8NVD Advisory· Published Oct 24, 2024· Updated Jun 17, 2026

CVE-2024-48423

Description

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.

LLM-synthesized narrative grounded in this CVE's description and references.

Assimp/Assimp2 versions
cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*
- (no CPE)range: <5.4.3
Assimp library/Assimp librarydescription
osv-coords3 versions
pkg:rpm/opensuse/assimp&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/assimp&distro=openSUSE%20Tumbleweed pkg:rpm/suse/assimp&distro=SUSE%20Package%20Hub%2015%20SP6
< 5.3.1-bp156.3.9.1+ 2 more
- (no CPE)range: < 5.3.1-bp156.3.9.1
- (no CPE)range: < 5.4.3-3.1
- (no CPE)range: < 5.3.1-bp156.3.9.1

github.com/assimp/assimp/issues/5788nvdExploitIssue TrackingThird Party Advisory

No linked articles in our index yet.