Bug: Issue 483106344: assimp:assimp_fuzzer: Use-of-uninitialized-value in std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<ch
- Dominant language
- C++
- Stars
- 13.2k
- Forks
- 3.2k
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 21
Description
https://issues.oss-fuzz.com/issues/483106344
Reference Info: 483106344 assimp:assimp_fuzzer: Use-of-uninitialized-value in std::__1::basic_string, std::__1::allocator 1362134 > OSS Fuzz](https://issues.oss-fuzz.com/components/1638179)
status: New
reporter: [87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com)
cc: [ki...@assimp.org](mailto:ki...@assimp.org), [kim.kulling@googlemail.com](mailto:kim.kulling@googlemail.com), [re...@fastmail.com](mailto:re...@fastmail.com)
collaborators: [co...@oss-fuzz.com](mailto:co...@oss-fuzz.com)
type: Vulnerability
access level: Limited visibility
priority: P2
severity: S2
hotlist: [Reproducible](https://issues.oss-fuzz.com/hotlists/6182481), [Stability-Memory-MemorySanitizer](https://issues.oss-fuzz.com/hotlists/6182183)
retention: Component default
Project: assimp
Reported: Feb 10, 2026
[87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com) added [comment #1](https://issues.oss-fuzz.com/issues/483106344#comment1):
Detailed Report: [https://oss-fuzz.com/testcase?key=5172217423134720](https://www.google.com/url?q=https://oss-fuzz.com/testcase?key%3D5172217423134720&sa=D&source=buganizer&usg=AOvVaw3BrkarNptJWeZR4gqAit2v)
Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer
Job Type: libfuzzer_msan_assimp
Platform Id: linux
Crash Type: Use-of-uninitialized-value
Crash Address:
Crash State:
std::__1::basic_string, std::__1::allocator
Contributor guide
Research direction
Start with the assimp_fuzzer reproduction instructions and testcase 5172217423134720, then trace the MSAN report through Assimp::BlenderImporter::ExtractScene and Assimp::Logger::info. Confirm the uninitialized value and identify its source before changing code. Done means the reproducer no longer reports the use-of-uninitialized-value under MSAN.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- computer-graphics, testing
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100