CVE - CVE-2025-3159

CVE-ID
CVE-2025-3159	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is e8a6286542924e628e02749c4f5ac4f91fdae71b. It is recommended to apply a patch to fix this issue.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:Submit #542247 \| Open Asset Import Library Assimp >=5.4.3 Heap-based Buffer Overflow URL:https://vuldb.com/?submit.542247 MISC:VDB-303105 \| CTI Indicators (IOB, IOC, IOA) URL:https://vuldb.com/?ctiid.303105 MISC:VDB-303105 \| Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow URL:https://vuldb.com/?id.303105 MISC:https://github.com/assimp/assimp/issues/6024 URL:https://github.com/assimp/assimp/issues/6024 MISC:https://github.com/assimp/assimp/issues/6024#issue-2877382033 URL:https://github.com/assimp/assimp/issues/6024#issue-2877382033 MISC:https://github.com/assimp/assimp/pull/6051 URL:https://github.com/assimp/assimp/pull/6051 MISC:https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b URL:https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b
Assigning CNA
VulDB
Date Record Created
20250403	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20250403)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)