PT-2025-12773 · Assimp+1 · Assimp+1
D3Ng03
·
Publicado
2025-03-25
·
Atualizado
2025-07-17
·
CVE-2025-2750
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Open Asset Import Library Assimp version 5.4.3
Description
A critical vulnerability was found in the Open Asset Import Library Assimp, affecting the
Assimp::CSMImporter::InternReadFile function of the CSM File Handler component. This issue leads to an out-of-bounds write and can be initiated remotely. The exploit has been disclosed publicly.Recommendations
For Open Asset Import Library Assimp version 5.4.3, consider disabling the
InternReadFile function of the CSM File Handler component as a temporary workaround until a patch is available. Restrict access to the CSM File Handler to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Assimp
Debian