Heap Overflow in assimp

Fri, 05 Apr 2024 00:00:00 +0000

Heap Overflow #6019

Bug: Heap-based Buffer Overflow in AI_MD5_PARSE_STRING_IN_QUOTATION

Source: https://github.com/assimp/assimp/issues/6019

Summary

heap buffer overflow in AI_MD5_PARSE_STRING_IN_QUOTATION. An attacker could potentially exploit the vulnerability to cause a remote code execution, if they can trick the victim into running assimp on a malformed MD5 file.

Heap Overflow was caused by function memcpy

MEMCPY(3) Linux Programmer's Manual MEMCPY(3)

NAME
 memcpy - copy memory area

SYNOPSIS
 #include <string.h>

 void *memcpy(void *dest, const void *src, size_t n);

DESCRIPTION
 The memcpy() function copies n bytes from memory area src to memory area dest. The memory areas must not overlap. Use memmove(3) if the memory areas do overlap.

RETURN VALUE
 The memcpy() function returns a pointer to dest.

ATTRIBUTES
 For an explanation of the terms used in this section, see attributes(7).

ACID FLOW

ASAN giving heap overflow error in fucntion AI_MD5_PARSE_STRING_IN_QUOTATION

Heap-Overflow on Arzedlab 🪵

Heap Overflow in assimp

Heap Overflow #6019

Bug: Heap-based Buffer Overflow in AI_MD5_PARSE_STRING_IN_QUOTATION

Summary

ACID FLOW