An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-48423.json"