PYSEC-2025-158

vendorUSosv

view advisory published 2025-03-10Licence: CC-BY-4.0

A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.h of the component File Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-2151US	high8.8	0.59% (48th)	—	2025-03-10
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLine in the library ParsingUtils.…

references

External citations — patches, advisories, analysis.

https://github.com/assimp/assimp/issues/6016REPORT
https://github.com/assimp/assimp/issues/6026REPORT
https://github.com/sae-as-me/Crashes/raw/refs/heads/main/assimp/assimp_crash_1WEB
https://vuldb.com/?ctiid.299062REPORT
https://vuldb.com/?id.299062ADVISORY
https://vuldb.com/?submit.510582ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan