diff options
| author | Vinz Spring <[email protected]> | 2025-06-08 12:10:12 +0200 |
|---|---|---|
| committer | GitHub <[email protected]> | 2025-06-08 12:10:12 +0200 |
| commit | 177797c77b027a6de080fb3bacbd8822617e11d8 (patch) | |
| tree | eeafad691d3d8810e4c41ecc77b9c25ad6deac22 /code/AssetLib/FBX/FBXConverter.cpp | |
| parent | c1d6226c068734de277e7dc5eeb5e735753dfde4 (diff) | |
Fixes CVE-2025-2751: Out-of-bounds Read in Assimp::CSMImporter::InternReadFile (closes #6012) (#6224)HEADupstream/master
description:
issue:
- https://github.com/assimp/assimp/blob/4ad1d2aa3086517816716a50aa122342806736f9/code/AssetLib/CSM/CSMLoader.cpp#L274C1-L275C1
- sometimes the code tried to construct a new 4x4 matrix from a nullptr, thus reading out of bounds
fix:
- added nullptr check
- added array count check
- added default fallback init to identity matrix
Co-authored-by: Vinz Spring <[email protected]>
Co-authored-by: Kim Kulling <[email protected]>
Diffstat (limited to 'code/AssetLib/FBX/FBXConverter.cpp')
0 files changed, 0 insertions, 0 deletions