Bug: Issue 483102913: assimp:assimp_fuzzer: Direct-leak in Assimp::Discreet3DSImporter::ParseChunk

https://issues.oss-fuzz.com/issues/483102913

Reference Info: 483102913 assimp:assimp_fuzzer: Direct-leak in Assimp::Discreet3DSImporter::ParseChunk
component: [Public Trackers > 1362134 > OSS Fuzz](https://issues.oss-fuzz.com/components/1638179)
status: New
reporter: [87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com)
cc: [ki...@assimp.org](mailto:ki...@assimp.org), [kim.kulling@googlemail.com](mailto:kim.kulling@googlemail.com), [re...@fastmail.com](mailto:re...@fastmail.com)
collaborators: [co...@oss-fuzz.com](mailto:co...@oss-fuzz.com)
type: Bug
access level: Limited visibility
priority: P2
severity: S4
hotlist: [Reproducible](https://issues.oss-fuzz.com/hotlists/6182481), [Stability-Memory-AddressSanitizer](https://issues.oss-fuzz.com/hotlists/6182447), [Stability-Memory-LeakSanitizer](https://issues.oss-fuzz.com/hotlists/6183500)
retention: Component default
Project: assimp
Reported: Feb 10, 2026

[87...@developer.gserviceaccount.com](mailto:87...@developer.gserviceaccount.com) added [comment #1](https://issues.oss-fuzz.com/issues/483102913#comment1):
Detailed Report: [https://oss-fuzz.com/testcase?key=4563138984083456](https://www.google.com/url?q=https://oss-fuzz.com/testcase?key%3D4563138984083456&sa=D&source=buganizer&usg=AOvVaw1Vrlvvghjg_pCMuHVuq16J)

Project: assimp
Fuzzing Engine: libFuzzer
Fuzz Target: assimp_fuzzer
Job Type: libfuzzer_asan_assimp
Platform Id: linux

Crash Type: Direct-leak
Crash Address:
Crash State:
Assimp::Discreet3DSImporter::ParseChunk
Assimp::Discreet3DSImporter::ParseObjectChunk
Assimp::Discreet3DSImporter::ParseEditorChunk

Sanitizer: address (ASAN)

Crash Revision: [https://oss-fuzz.com/revisions?job=libfuzzer_asan_assimp&revision=202601250643](https://www.google.com/url?q=https://oss-fuzz.com/revisions?job%3Dlibfuzzer_asan_assimp%26revision%3D202601250643&sa=D&source=buganizer&usg=AOvVaw2Qid5YoXi9MZuoF6AakmMY)

Reproducer Testcase: [https://oss-fuzz.com/download?testcase_id=4563138984083456](https://www.google.com/url?q=https://oss-fuzz.com/download?testcase_id%3D4563138984083456&sa=D&source=buganizer&usg=AOvVaw0pFSYgEpolmXEf7Db3-9zM)

Issue filed automatically.

See [https://google.github.io/oss-fuzz/advanced-topics/reproducing](https://www.google.com/url?q=https://google.github.io/oss-fuzz/advanced-topics/reproducing&sa=D&source=buganizer&usg=AOvVaw2PF-rd9_FrkFJ-mNErDWkF) for instructions to reproduce this bug locally.
When you fix this bug, please
* mention the fix revision(s).
* state whether the bug was a short-lived regression or an old bug in any stable releases.
* add any other useful information.
This information can help downstream consumers.

If you need to contact the OSS-Fuzz team with a question, concern, or any other feedback, please file an issue at [https://github.com/google/oss-fuzz/issues](https://www.google.com/url?q=https://github.com/google/oss-fuzz/issues&sa=D&source=buganizer&usg=AOvVaw3uDxRzHL584JLrGWXGLu6V). Comments on individual Monorail issues are not monitored.

This bug is subject to a 90 day disclosure deadline. If 90 days elapse
without an upstream patch, then the bug report will automatically
become visible to the public.

Generated by Google IssueTracker notification system.

Start with the OSS-Fuzz reproducer testcase 4563138984083456 and the local reproduction instructions. Trace Assimp::Discreet3DSImporter::ParseChunk through ParseObjectChunk and ParseEditorChunk, then rerun the assimp_fuzzer ASAN job to confirm that the reported direct leak is gone.

Written by the indexing model from the issue text.