CVE-2022-45748 | Vulnetix

CVE-2022-45748 PUBLISHED CVSS 9.300000190734863 CRITICAL

Reported by mitre · Published January 20, 2023

An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
n/a	n/a	n/a
ConanCenter	assimp	5.1.4
n/a	n/a	*

Timeline

Jan 20, 2023 CVE Published
Jan 21, 2023 EPSS Score (30 in total, the first dated here)
Mar 17, 2026 Security Advisory
Jun 12, 2026 Coalition ESS Score
Jun 17, 2026 CVE Updated

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-45748
vulnetix vdb fixes CVE-2022-45748

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-45748/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://nvd.nist.gov/vuln/detail/CVE-2022-45748 advisory

Look up in the Resolve Platform →