Open Asset Import Library Assimp Uncontrolled Memory Allocation Vulnerability in MDL File Handler

A resource consumption vulnerability has been identified in Open Asset Import Library (Assimp) version 5.4.3. The issue arises in the MDL File Handler component, specifically within the 'ParseTextureColorData' function of 'MDLMaterialLoader.cpp'. The vulnerability allows for uncontrolled memory allocation by manipulating the 'mWidth' and 'mHeight' parameters, which can lead to excessive resource consumption and potential denial-of-service conditions. This vulnerability can be exploited remotely, without authentication, but requires user interaction.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by exhausting available memory resources, leading to program crashes.

Reproduction

The vulnerability can be reproduced by using a fuzzer to send a malformed MDL file to the Assimp library. This can be done by building Assimp with address sanitizer enabled, compiling a fuzzer that targets the MDL importer, and then running the fuzzer with a crafted input that triggers the out-of-memory condition.

Remediation

Users are advised to upgrade to Assimp version 6.0, where this vulnerability has been addressed.