CVE-2024-48425

A flaw was found in the Assimp asset import library. An attacker may be able to trigger a segmentation fault using specially-crafted 3D model files. This can result in a denial of service due to invalid memory access.

This vulnerability is considered moderate rather than important because it leads to a segmentation fault (application crash) due to a null pointer dereference, but it does not directly enable arbitrary code execution or privilege escalation. Exploitation requires specific conditions, such as the use of fuzz testing or specially crafted input files, which limit the likelihood of real-world attacks.

It's important to note that this vulnerability does not impact any Red Hat products, indicating that Red Hat's software stack is unaffected by this specific CVE.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.