CVE-2024-48424

What it actually does

Heap buffer overflow in OpenDDLParser::parseStructure during OpenGEX file processing leads to memory corruption.

Why it matters to the business

Potential application crashes or remote code execution on affected systems using the vulnerable library component, with low urgency due to stable low EPSS and no KEV listing or ransomware use.

How an attack unfolds

An attacker crafts a malicious OpenGEX file and supplies it to an application using the Assimp library, triggering the vulnerable parseStructure function to overflow a heap buffer and potentially gain code execution.

How to fix it

Upgrade affected Tomcat packages on SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS, SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS, SUSE Linux Enterprise Server 15 SP1-BCL, SUSE Linux Enterprise Server 15 SP1-LTSS, SUSE Linux Enterprise Server for SAP Applications 15 SP1 and SUSE Enterprise Storage 6 to version 9.0.36-150100.4.76.1 or later.

How to confirm the fix worked

Verify installed package versions match or exceed the listed fixed versions and test parsing of sample OpenGEX files for stability.

Typical attack path

1. Identify target application accepting OpenGEX files
2. Craft malicious OpenGEX input to trigger buffer overflow
3. Deliver file via upload, network share or other input vector
4. Trigger parsing to achieve memory corruption or code execution

How to detect it

Review application logs for parsing errors or crashes during OpenGEX file processing and inspect for unexpected memory-related faults.

What your security team should do

• Apply the specified package updates across all listed SUSE Tomcat deployments
• Monitor for any new exploit maturity signals given the low current EPSS
• Restrict untrusted OpenGEX file processing until patches are deployed