PT-2026-38501

تاريخ النشر

2026-04-27

·

تاريخ التحديث

2026-04-27

الوصف من

CVSS 3.1
5.3
متوسطة
المقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.
قابلية الاستغلال
إصلاح
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
JLSEC-2026-196
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾