MAL-2025-191690 Malicious code in bh-25-req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ddd759ada90b89401904e23b4e8cbe6a3021baf3c34495150b4a713ca7063be0 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in req-ase-automate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be0304806895d9de6cc08d6e969b20baa9be9a8fb1aae813254eb58de6b7212c If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

MAL-2025-191854 Malicious code in req-ase-automate (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be0304806895d9de6cc08d6e969b20baa9be9a8fb1aae813254eb58de6b7212c If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

MAL-2025-191853 Malicious code in req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6058bfefce274f953708b9c8ba745b15525a3f573da10dac8597285eac526fd4 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in req-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6058bfefce274f953708b9c8ba745b15525a3f573da10dac8597285eac526fd4 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

Malicious code in jsonreq-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b2470d0f1bf1493c176d8622368f7f975be80c5f8a2acfa1dcae8199bc54e7ed If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

MAL-2025-191684 Malicious code in ase-jreq (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 53d3ded73c297df3a6a010b08188ed7b3fab13570e8d72492803ae3903a49939 If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

MAL-2025-191768 Malicious code in jsonreq-ase (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b2470d0f1bf1493c176d8622368f7f975be80c5f8a2acfa1dcae8199bc54e7ed If run, the package exfiltrates AWS credentials. Though it's described as test, the exfiltration really happens --- Category: MALICIOUS - The campaign has...

The vulnerability of the ASE File Handler component of the cross-platform library for importing 3D models, Assimp (Open Asset Import Library), allows a hacker to trigger a service failure.

The vulnerability of the ASE File Handler component of the cross-platform 3D model import library Assimp Open Asset Import Library is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-24653

Missing Authorization vulnerability in NotFound Admin and Site Enhancements ASE Pro allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Admin and Site Enhancements ASE Pro: from n/a through 7.6.1.1...

OESA-2025-1405 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability classified as critic...

OESA-2025-1402 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability classified as critic...

OESA-2025-1404 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability classified as critic...

SUSE CVE-2025-3159

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

PYSEC-2025-263

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

UBUNTU-CVE-2025-3159

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

CVE-2025-3159 Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

CVE-2025-3159

The CVE-2025-3159 issue concerns the Open Asset Import Library (Assimp) 5.4.3, specifically the ASE File Handler’s function Assimp::ASE::Parser::ParseLV4MeshBonesVertices. The vulnerability is a heap-based overflow in ASEParser.cpp, with local attack requirements. The advisory notes this as a cri...

CVE-2025-3159 Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buff...

Assimp 安全漏洞

Assimp is an Assimp open source library. It is used to import and export various 3D model formats. A security vulnerability exists in Assimp version 5.4.3, which stems from a heap buffer overflow in the ASE file handling component...