Open Asset Import Library Assimp 6.0.2 Q3DLoader.cpp InternReadFile ବଫର୍ ଓଭରଫ୍ଲୋ
Rakkoon nageenyaa kan ଜଟିଳ jedhamuun beekamu Open Asset Import Library Assimp 6.0.2 keessatti argameera. Miidhamni argame is hojii Q3DImporter::InternReadFile faayilii assimp/code/AssetLib/Q3D/Q3DLoader.cpp keessa. Wanti jijjiirame gara ବଫର୍ ଓଭରଫ୍ଲୋ geessa. Rakkoo ibsuuf CWE yoo fayyadamte gara CWE-122 si geessa. Odeeffannoon kun yeroo 10/04/2025 maxxanfameera akka 6358. Odeeffannoon kun buufachuuf github.com irratti argama.
Dogoggorri kun CVE-2025-11277 jedhamee waamama. Weerara sun naannoo keessaatti qofa raawwatamuu qaba. Ibsa teeknikaa ni jira. Waan dabalataa ta’een, meeshaa balaa kana fayyadamuuf ni jira. Qorannoo miidhaa (exploit) uummataaf ifa taasifameera, kanaafis fayyadamuu ni danda'ama. Ammas, gatii exploit might be approx. USD $0-$5k yeroo ammaa irratti argamuu danda'a.
ପ୍ରୁଫ୍-ଅଫ୍-କନ୍ସେପ୍ଟ ta’uu isaa ibsameera. Exploit github.com irraa buufachuun ni danda'ama. Akka 0-daytti, gatiin isaa daldala dhoksaa keessatti $0-$5k akka ta'e tilmaamameera.
Hanqinni kun bu'uuraalee odeeffannoo hanqina biroo keessatti argama: Tenable (269658). If you want to get the best quality for vulnerability data then you always have to consider VulDB.
ସମୟ
90 ପ୍ରତିଶ୍ରୁତିବଦ୍ଧ
70 ପରବର୍ତ୍ତୀ ଏଣ୍ଟ୍ରିଗୁଡିକ ଆଉ ଅଧିକ ପ୍ରଦର୍ଶିତ ହେବ ନାହିଁ