PYSEC-2025-155

vendorUSosv

view advisory published 2025-10-05Licence: CC-BY-4.0

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-11274US	medium5.5	0.21% (11th)	—	2025-10-05
A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. T…

references

External citations — patches, advisories, analysis.

https://github.com/assimp/assimp/issues/6356REPORT
https://github.com/user-attachments/files/22407575/poc.zipEVIDENCE
https://vuldb.com/?ctiid.327008REPORT
https://vuldb.com/?id.327008ADVISORY
https://vuldb.com/?submit.658075ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan