PT-2025-14822 · Assimp+3 · Assimp+3
Chen Lihai
·
Published
2025-03-04
·
Updated
2025-09-12
·
CVE-2025-3196
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Open Asset Import Library Assimp version 5.4.3
Description
A critical vulnerability was found in Open Asset Import Library Assimp. The function
Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD2Loader.cpp of the component Malformed File Handler is affected. The manipulation of the argument Name leads to a stack-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.Recommendations
As a temporary workaround, consider disabling the
Assimp::MD2Importer::InternReadFile function until a patch is available.
To resolve the issue, upgrade the affected component to a newer version.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
Memory Corruption
Stack Overflow
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Assimp
Debian
Red Os