peng cf7b652190 MD3: Fix MD3Importer surface header bounds checks to prevent heap overflow (#6441) ...

Improve bounds checks in MD3Importer::ValidateSurfaceHeaderOffsets to prevent pcSurf from accessing data outside the MD3 buffer (fixes #6070, CVE-2025-3549).

Signed-off-by: mapengyuan <mapengyuan@xfusion.com>
Co-authored-by: Kim Kulling <kimkulling@users.noreply.github.com>

2026-01-20 00:29:27 +01:00

..

3DS

Refactor string checks and variable declarations (#6392)

2025-11-14 00:18:35 +01:00

3MF

Fix sonarcube stuff (#6387)

2025-11-10 23:29:03 +01:00

AC

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

AMF

Refactor condition checks for empty vectors (#6385)

2025-11-07 16:07:39 +01:00

ASE

Refactor condition checks for empty vectors (#6385)

2025-11-07 16:07:39 +01:00

Assbin

Bugfix/fix sonarcube findings (#6369)

2025-10-14 00:01:50 +02:00

Assjson

Fix warning related to missing-variable-declarations, add static to global variable.

2023-04-19 23:27:23 +08:00

Assxml

Update texture output format in AssxmlFileWriter (#6372)

2025-10-17 11:24:38 +02:00

B3D

Bugfix/fix sonarcube findings (#6369)

2025-10-14 00:01:50 +02:00

Blender

Refactor condition checks for empty vectors (#6385)

2025-11-07 16:07:39 +01:00

BVH

Bugfix/fix sonarcube findings (#6369)

2025-10-14 00:01:50 +02:00

C4D

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

COB

Fix sonarcube stuff (#6387)

2025-11-10 23:29:03 +01:00

Collada

Fix sonarcube stuff (#6387)

2025-11-10 23:29:03 +01:00

CSM

Bugfix/fix sonarcube findings (#6369)

2025-10-14 00:01:50 +02:00

DXF

Fixed DXFHelper using float instead of ai_real (#6404)

2025-11-30 22:01:11 +01:00

FBX

Fix incorrect FBX connection order (#6421)

2025-12-11 21:42:45 +01:00

glTF

Fix linkage (#6388)

2025-11-16 20:05:50 +01:00

glTF2

Feature: Add EXT_texture_webp extension to glb importer (#6431)

2025-12-22 12:44:18 +01:00

glTFCommon

Fix linkage (#6388)

2025-11-16 20:05:50 +01:00

HMP

More constexpr (#6066)

2025-03-27 15:08:21 +01:00

IFC

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

IQM

Refactoring: Some cleanups

2023-11-12 21:09:33 +01:00

Irr

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

LWO

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

LWS

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

M3D

Change strcpy to strncpy for format hint safety (#6365)

2025-10-02 16:31:00 +02:00

MD2

fix: closes #6069 CVE-2025-3196 (#6154)

2025-05-31 14:27:10 +02:00

MD3

MD3: Fix MD3Importer surface header bounds checks to prevent heap overflow (#6441)

2026-01-20 00:29:27 +01:00

MD4

…

MD5

MD5: Fix uninitialized pointer dereference for file with invalid vertex index (#6439)

2026-01-12 15:08:31 +01:00

MDC

MDC: Fix MDCImporter surface header bounds and endianness checks (#6440)

2026-01-15 13:23:54 +01:00

MDL

MDL/HL1: bounds-checked buffers and safer parsing (#6445)

2026-01-19 21:25:09 +01:00

MMD

Harmonize Importer #includes (#6065)

2025-03-27 11:13:44 +01:00

MS3D

Update default material name handling (#6366)

2025-10-07 20:25:24 +02:00

NDO

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

NFF

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

Obj

OBJ: avoid extra scanning while reading faces in ObjFileParser.cpp (#6281)

2026-01-14 16:43:36 +01:00

OFF

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

Ogre

Fix Whitespace (#6063)

2025-03-26 00:12:55 +01:00

OpenGEX

Fix: Support uint16 indices in OpenGEX as well (#6137)

2025-05-07 10:15:54 +02:00

Ply

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

Q3BSP

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

Q3D

Implement overflow check in Q3DLoader (#6417)

2025-12-09 23:28:44 +01:00

Raw

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

SIB

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

SMD

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

Step

WiP. Passing USD prims along with render nodes to look for USD references. Save reference path to metaData['ref'] (#5807)

2025-11-24 21:26:46 +01:00

STEPParser

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

STL

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

Terragen

Refactorings: glTF cleanups (#6028)

2025-03-05 21:37:47 +01:00

Unreal

Fix to fail in the function fast_atoreal_move when the flag ASSIMP_DOUBLE_PRESICION is enabled (#6250)

2025-07-29 14:19:50 +02:00

USD

Revert buggy PR (#6415)

2025-12-09 20:57:36 +01:00

VRML

Clone meshlab/tinyusdz repos in default location (#6239)

2025-09-23 11:34:13 +02:00

X

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00

X3D

X3D: Fix invalid vector::back usage (#6283)

2025-07-25 15:01:16 +02:00

XGL

Revert "Refactoring: use using types (#6266)" (#6324)

2025-11-04 15:10:45 +01:00