assimp / assimp/assimp

Bug: Issue 483106344: assimp:assimp_fuzzer: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch

Open
#6,511 0 comments 0 reactions 0 assignees View on GitHub
Bug Fuzzer
Dominant language
C++
Stars
13.2k
Forks
3.2k
Avg merge
2d 8h
Merged PRs (30d)
21

Description

https://issues.oss-fuzz.com/issues/483106344

Reference Info: 483106344 assimp:assimp_fuzzer: Use-of-uninitialized-value in std::__1::basic_string, std::__1::allocator 1362134 > OSS Fuzz](https://issues.oss-fuzz.com/components/1638179)
status: New
reporter: [87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com)
cc: [ki...@assimp.org](mailto:ki...@assimp.org), [kim.kulling@googlemail.com](mailto:kim.kulling@googlemail.com), [re...@fastmail.com](mailto:re...@fastmail.com)
collaborators: [co...@oss-fuzz.com](mailto:co...@oss-fuzz.com)
type: Vulnerability
access level: Limited visibility
priority: P2
severity: S2
hotlist: [Reproducible](https://issues.oss-fuzz.com/hotlists/6182481), [Stability-Memory-MemorySanitizer](https://issues.oss-fuzz.com/hotlists/6182183)
retention: Component default
Project: assimp
Reported: Feb 10, 2026

[87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com) added [comment #1](https://issues.oss-fuzz.com/issues/483106344#comment1):
Detailed Report: [https://oss-fuzz.com/testcase?key=5172217423134720](https://www.google.com/url?q=https://oss-fuzz.com/testcase?key%3D5172217423134720&sa=D&source=buganizer&usg=AOvVaw3BrkarNptJWeZR4gqAit2v)

Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer
Job Type: libfuzzer_msan_assimp
Platform Id: linux

Crash Type: Use-of-uninitialized-value
Crash Address:
Crash State:
std::__1::basic_string, std::__1::allocator

Contributor guide

Open the contributing guide

Research direction

Start with the assimp_fuzzer reproduction instructions and testcase 5172217423134720, then trace the MSAN report through Assimp::BlenderImporter::ExtractScene and Assimp::Logger::info. Confirm the uninitialized value and identify its source before changing code. Done means the reproducer no longer reports the use-of-uninitialized-value under MSAN.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
computer-graphics, testing
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.