Approved changes feed: RSS · Atom

cpe:2.3:a:assimp:assimp:5.1.1:*:*:*:*:*:*:*

part: a version: 5.1.1 update: *

VendorAssimp (0b9877dc-4cc4-5e37-8a44-cf5f32827754)
ProductAssimp (96775b28-80a7-5a95-b127-a74b3054c926)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/assimp purl2cpe 2026-06-01 10:17:10.810519
pkg:deb/ubuntu/assimp purl2cpe 2026-06-01 10:17:10.810520
pkg:github/assimp/assimp purl2cpe 2026-06-01 10:17:10.810522
pkg:gitlab/ubports/assimp purl2cpe 2026-06-01 10:17:10.810523
pkg:nuget/Assimp purl2cpe 2026-06-01 10:17:10.810524
pkg:rpm/fedora/assimp purl2cpe 2026-06-01 10:17:10.810526
pkg:rpm/opensuse/assimp purl2cpe 2026-06-01 10:17:10.810527
pkg:sourceforge/assimp purl2cpe 2026-06-01 10:17:10.810529

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-45948 vulnerable 2026-06-08 05:36:49.596541 Details available
Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper).
Published: 2021-12-31T00:00:00.000Z
Updated: 2024-08-04T04:54:31.218Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.