D3Ng03

A critical issue has been found in the Open Asset Import Library Assimp, affecting the function `Assimp::LWO::AnimResolver::UpdateAnimRangeSetup` in the file `code/AssetLib/LWO/LWOAnimation.cpp` of the LWO File Handler component. This issue leads to a heap-based buffer overflow. The attack can be launched on the local host.

A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function `Assimp::SceneCombiner::AddNodeHashes` of the file `code/Common/SceneCombiner.cpp` of the component File Handler. The manipulation leads to out-of-bounds read. An attack has to be approached locally.

A problematic vulnerability was found in the Open Asset Import Library Assimp. This issue affects the function `Assimp::MDLImporter::ParseTextureColorData` of the MDL File Handler component. The manipulation of the arguments `mWidth` and `mHeight` leads to resource consumption. The attack can be initiated remotely.

A critical issue has been found in the ASE File Handler component of the Open Asset Import Library Assimp. This issue affects the `Assimp::ASEImporter::BuildUniqueRepresentation` function in the file `ASELoader.cpp`. The manipulation of the `mIndices` argument leads to an out-of-bounds read. It is possible to initiate the attack remotely.

A critical issue has been identified, affecting the function `SceneCombiner::MergeScenes` of the component LWS File Handler. This issue leads to an out-of-bounds read and can be exploited remotely. The exploit has been publicly disclosed.

A critical issue has been identified in the AC3D File Handler component, specifically in the function `Assimp::AC3DImporter::ConvertObjectSection` of the file `code/AssetLib/AC/ACLoader.cpp`. The manipulation of the `it` argument leads to a heap-based buffer overflow. This issue can be exploited remotely.

A critical issue has been found in the Open Asset Import Library Assimp. This issue affects the `Assimp::AC3DImporter::ConvertObjectSection` function in the `AC3D File Handler` component, specifically in the file `code/AssetLib/AC/ACLoader.cpp`. The manipulation of the `tmp` argument leads to a heap-based buffer overflow. It is possible to initiate the attack remotely.

A critical vulnerability was found in Open Asset Import Library Assimp, affecting the function `AI MD5 PARSE STRING IN QUOTATION` of the file `code/AssetLib/MD5/MD5Parser.cpp` of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue affects the function `Assimp::AC3DImporter::ConvertObjectSection` of the component AC3D File Handler. The manipulation of the argument `src.entries` leads to an out-of-bounds read. This issue can be exploited remotely.

A critical vulnerability was found in the Open Asset Import Library Assimp, affecting the `Assimp::CSMImporter::InternReadFile` function of the CSM File Handler component. This issue leads to an out-of-bounds write and can be initiated remotely. The exploit has been disclosed publicly.

A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function `Assimp::CSMImporter::InternReadFile` of the file `code/AssetLib/CSM/CSMLoader.cpp` of the component CSM File Handler. The manipulation of the argument `na` leads to an out-of-bounds read. The attack can be initiated remotely.

A vulnerability was found in the Open Asset Import Library Assimp, affecting the function `fast atoreal move` in the library include/assimp/fast atof.h of the component CSM File Handler. This issue leads to an out-of-bounds read and may be initiated remotely.

A critical vulnerability has been found in Open Asset Import Library Assimp. This issue affects the function `CSMImporter::InternReadFile` of the file `code/AssetLib/CSM/CSMLoader.cpp`. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

A vulnerability was found in the Open Asset Import Library Assimp. This issue affects the function `MDLImporter::InternReadFile Quake1` of the file `code/AssetLib/MDL/MDLLoader.cpp`. The manipulation of the arguments `skinwidth` and `skinheight` leads to a divide by zero error. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

A critical issue was found in the ASE File Handler component, specifically affecting the function `Assimp::ASE::Parser::ParseLV4MeshBonesVertices` in the file `code/AssetLib/ASE/ASEParser.cpp`. This leads to a heap-based buffer overflow. The attack must be launched locally.

The issue is related to a Prototype Pollution vulnerability in the `setByPath` function, which can lead to remote code execution (RCE). This vulnerability allows an attacker to modify object attributes, potentially enabling them to execute arbitrary code. The vulnerability is present in versions prior to 1.0.2 of the dot-diver library.