PYSEC-2025-163

vendorUSosv

Advisory ansehen veröffentlicht 2025-03-25Lizenz: CC-BY-4.0

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-2752US	high8.8	0.67% (52nd)	—	2025-03-25
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/f…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/assimp/assimp/issues/6013REPORT
https://github.com/assimp/assimp/issues/6013#issue-2877371176REPORT
https://vuldb.com/?ctiid.300857REPORT
https://vuldb.com/?id.300857ADVISORY
https://vuldb.com/?submit.517786ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan