MEDIUM5.5
PYSEC-2024-293
Details
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due to a read access violation at address 0x000000000460, which points to the zero page, indicating a null or invalid pointer dereference.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/pyassimp
Introduced in:
0No fixed version published yet for pyassimp (pip). Pin to a known-safe version or switch to an alternative.