The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade assimp | Oct 1, 2024 | Jul 19, 2024 |
| Debian | — | Upgrade assimp | May 15, 2025 | Jul 19, 2024 |
| Suse | — | Upgrade libQt53DCore-develUpgrade libQt53DQuick-develUpgrade libqt5-qt3d-private-headers-develUpgrade libqt5-qtquick3d-private-headers-develUpgrade assimp-develUpgrade libQt53DQuickRender5Upgrade libQt53DInput5Upgrade libQt5Quick3D5Upgrade libqt5-qt3d-toolsUpgrade libQt53DExtras5Upgrade libQt53DQuick5Upgrade libQt53DLogic5Upgrade libqt5-qtquick3d-importsUpgrade libQt53DRender5Upgrade libQt53DQuickInput-develUpgrade libQt53DQuickScene2D-develUpgrade libqt5-qtquick3d-examplesUpgrade libqt5-qtquick3d-develUpgrade libqt5-qt3d-examplesUpgrade libQt53DCore5Upgrade libQt53DQuickInput5Upgrade libQt53DQuickAnimation-develUpgrade libQt53DQuickExtras-develUpgrade libQt53DExtras-develUpgrade libqt5-qt3d-importsUpgrade libQt53DAnimation-develUpgrade libqt5-qt3d-develUpgrade libassimp5Upgrade libQt53DInput-develUpgrade libQt53DAnimation5Upgrade libqt5-qtquick3d-toolsUpgrade libQt53DLogic-develUpgrade libQt5Quick3DAssetImport5Upgrade libQt53DQuickAnimation5Upgrade libQt53DRender-develUpgrade libQt53DQuickScene2D5Upgrade libQt53DQuickExtras5Upgrade libQt53DQuickRender-devel | Jul 29, 2024 | Jul 19, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Jul 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub