Vinz Spring 177797c77b Fixes CVE-2025-2751: Out-of-bounds Read in Assimp::CSMImporter::InternReadFile (closes #6012) (#6224) ...

description:
issue:
- 4ad1d2aa30/code/AssetLib/CSM/CSMLoader.cpp (L274C1-L275C1)
- sometimes the code tried to construct a new 4x4 matrix from a nullptr, thus reading out of bounds

fix:
- added nullptr check
- added array count check
- added default fallback init to identity matrix

Co-authored-by: Vinz Spring <vinzs@amazon.de>
Co-authored-by: Kim Kulling <kimkulling@users.noreply.github.com>

2025-06-08 12:10:12 +02:00

..

3DS

Refactor (#6127)

2025-05-03 11:46:10 +02:00

3MF

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

AC

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

AMF

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

ASE

Fix crashes (#6138)

2025-05-07 23:40:53 +02:00

Assbin

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

Assjson

Fix warning related to missing-variable-declarations, add static to global variable.

2023-04-19 23:27:23 +08:00

Assxml

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

B3D

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

Blender

Fix warning abut inexistent warning (#6153)

2025-05-13 20:37:42 +02:00

BVH

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

C4D

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

COB

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

Collada

fix compile error caused by PR #6087 when ASSIMP_DOUBLE_PRESICION is enabled (#6091)

2025-06-05 09:15:47 +02:00

CSM

Fixes CVE-2025-2751: Out-of-bounds Read in Assimp::CSMImporter::InternReadFile (closes #6012) (#6224)

2025-06-08 12:10:12 +02:00

DXF

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

FBX

Fix export fbx: Wrong Materials in LayerElementMaterial if a node contains multi meshes (#6103)

2025-06-05 09:05:36 +02:00

glTF

Updated Inner Cone formula for Spot Lights in GLTF (#6078)

2025-06-05 09:41:30 +02:00

glTF2

+ Only up to recognizing the KTX2 compressed image as a texture object is handled. (#6139)

2025-05-08 21:28:30 +02:00

glTFCommon

Replace exception by error in log (#6133)

2025-05-05 14:07:52 +02:00

HMP

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

IFC

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

IQM

Refactoring: Some cleanups

2023-11-12 21:09:33 +01:00

Irr

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

LWO

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

LWS

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

M3D

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

MD2

fix: closes #6069 CVE-2025-3196 (#6154)

2025-05-31 14:27:10 +02:00

MD3

Use unique pointer to fix possible leak (#6104)

2025-04-15 21:51:05 +02:00

MD4

…

MD5

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

MDC

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

MDL

fix: Fix build on armv6/armv7 (#6123)

2025-04-27 21:27:45 +02:00

MMD

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

MS3D

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

NDO

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

NFF

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

Obj

Use unique pointer to fix possible leak (#6104)

2025-04-15 21:51:05 +02:00

OFF

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

Ogre

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

OpenGEX

Fix: Support uint16 indices in OpenGEX as well (#6137)

2025-05-07 10:15:54 +02:00

Ply

Fix a bug where string erases throws out of range (#6135)

2025-05-06 23:33:28 +02:00

Q3BSP

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

Q3D

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

Raw

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

SIB

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

SMD

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

Step

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

STEPParser

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

STL

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

Terragen

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

Unreal

Unreal refactorings (#6182)

2025-05-16 14:18:37 +02:00

USD

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

VRML

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

X

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

X3D

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

XGL

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00