Open Asset Import Library Assimp Use-After-Free Vulnerability in LWO Importer

A heap-use-after-free vulnerability has been identified in Open Asset Import Library (Assimp) versions prior to 6.0.2. The issue arises in the LWO file importer, specifically within the 'FindUVChannels' function of 'LWOMaterial.cpp'. This vulnerability can be exploited locally by processing specially crafted LWO files, leading to a crash of the application. The vulnerability has been publicly disclosed and is tracked under issue #6258.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the application.

Reproduction

The vulnerability can be reproduced by compiling Assimp with AddressSanitizer enabled, using Clang as the compiler. After building the application, the 'assimp extract' command can be used to process a crafted LWO file, which triggers the use-after-free condition and causes a crash.