Every CVE Search/ Get API key

OSV-2022-1258

Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

No scoreFix available

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187

Crash type: Heap-buffer-overflow WRITE 12
Crash state:
Assimp::ObjFileImporter::createVertexArray
Assimp::ObjFileImporter::createTopology
Assimp::ObjFileImporter::createNodes

What each source reports

OSV No score

Heap-buffer-overflow in Assimp::ObjFileImporter::createVertexArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54187

Crash type: Heap-buffer-overflow WRITE 12
Crash state:
Assimp::ObjFileImporter::createVertexArray
Assimp::ObjFileImporter::createTopology
Assimp::ObjFileImporter::createNodes
Record
OSV-2022-1258
Updated
2026-11-02

Affected packages

Affected packages
PackageAffectedFixed
assimp
OSS-Fuzz
Listed versions, plus commit ranges
5.2.0v5.2.0v5.2.1v5.2.2v5.2.3v5.2.4v5.2.5
None known

History

History
RecordedChangedSources
first indexedOSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

OSV-2022-1258 is a vulnerability with no CVSS score yet in assimp, published December 11, 2022. No source lists public exploit code. A source reports a fix.

References

MoveEnter Open