CVE-2024-48426

A flaw was found in the Asset Import Library (Assimp). A maliciously crafted 3D model file can trigger this segmentation fault, causing the application to crash.

The segmentation fault detected in the SortByPTypeProcess::Execute function of the Assimp library is classified as a Moderate severity vulnerability rather than Important due to the context of its impact and exploitability. While the fault can lead to a program crash and disrupt normal operations, it does not inherently allow for arbitrary code execution or data corruption, which are characteristics typically associated with higher-severity vulnerabilities. Furthermore, the issue arises specifically during fuzz testing, indicating that it requires unusual or malformed input to trigger, limiting its potential exploitation in typical usage scenarios.

It's important to note that this vulnerability does not impact any Red Hat products, indicating that Red Hat's software stack is unaffected by this specific CVE.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.