Medium severity6.2NVD Advisory· Published Nov 21, 2024· Updated Jun 17, 2026

CVE-2024-53425

Description

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Assimp/Assimp3 versions
cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <5.4.3
osv-coords3 versions
pkg:rpm/opensuse/assimp&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/assimp&distro=openSUSE%20Tumbleweed pkg:rpm/suse/assimp&distro=SUSE%20Package%20Hub%2015%20SP6
< 5.3.1-bp156.3.9.1+ 2 more
- (no CPE)range: < 5.3.1-bp156.3.9.1
- (no CPE)range: < 5.4.3-3.1
- (no CPE)range: < 5.3.1-bp156.3.9.1

Patches

Vulnerability mechanics

References

github.com/assimp/assimp/issues/5860nvdExploitIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000