Open Asset Import Library Assimp Heap-Based Buffer Overflow Vulnerability

A critical heap-based buffer overflow vulnerability has been identified in Open Asset Import Library (Assimp) versions prior to 5.4.3. The issue arises in the 'read_meshes' function within 'HL1MDLLoader.cpp', where improper handling of meshes, vertices, normals, and bones can lead to out-of-bounds memory access. This vulnerability can be exploited locally, and details of the exploit are publicly available.

Impact

Exploitation of this vulnerability causes a heap-based buffer overflow, which can lead to arbitrary code execution or memory corruption.

Reproduction

The vulnerability can be reproduced by compiling Assimp with Clang, using specific flags to enable fuzzing and address sanitization. After compiling the library, the 'assimp_fuzzer' executable can be run with a proof-of-concept file that triggers the buffer overflow.