CVE-2025-2750 Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...

CVE-2025-2750

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is...

CVE-2025-2750

CVE-2025-2750 affects the Open Asset Import Library Assimp 5.4.3, specifically the CSM File Handler’s function Assimp::CSMImporter::InternReadFile in the file CSMLoader.cpp . The issue is an out-of-bounds write that is stated to be remotely exploitable, with the exploit disclosed publicly. Connec...

MAL-2025-2644 Malicious code in asset_cli_tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 56eaa865141139174bfeca87a7ab5f743c5025167bf539b16b8688232094d479 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-12775

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A vulnerability was found in the Open Asset Import Library Assimp, affecting the function fast atoreal move in the library include/assimp/fast atof.h of the component CSM File Handler...

Open Asset Import Library (assimp) buffer error vulnerability

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the presence of out-of-bounds reads...

Open Asset Import Library (assimp) security vulnerabilities

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an incorrect manipulation of the parameter it can cause a heap buffer overflow...

Open Asset Import Library (assimp) security vulnerabilities

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an incorrect operation of the parameter tmp that can cause a heap buffer overflow...

Open Asset Import Library (assimp) buffer error vulnerability

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the presence of out-of-bounds writes...

Open Asset Import Library (assimp) buffer error vulnerability

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the presence of out-of-bounds reads...

Luxion KeyShot buffer error vulnerability

Luxion KeyShot is a software for designing photographs of 3D scenes from Luxion, USA. The software allows real-time 3D rendering workflows to display results immediately and reduce the time required to create photorealistic product photos. Luxion KeyShot suffers from a buffer error vulnerability...

Open Asset Import Library (assimp) security vulnerabilities

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A security vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from an incorrect manipulation of the parameter data that can cause a heap buffer overflow...

Open Asset Import Library (assimp) buffer error vulnerability

Open Asset Import Library assimp is a library in the Open Asset Import Library open source. A buffer error vulnerability exists in Open Asset Import Library assimp version 5.4.3, which stems from the fact that incorrect manipulation of the parameter src.entries can lead to out-of-bounds reads...

PT-2025-12785

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue affects the function Assimp::AC3DImporter::ConvertObjectSection of the component AC3D File Handler. The manipulation of the argument src.entries leads to an...

PT-2025-12784

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical issue has been identified in the AC3D File Handler component, specifically in the function Assimp::AC3DImporter::ConvertObjectSection of the file...

PT-2025-12773

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A critical vulnerability was found in the Open Asset Import Library Assimp, affecting the Assimp::CSMImporter::InternReadFile function of the CSM File Handler component. This issue lea...

PT-2025-12774

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3 Description A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the...

CVE-2025-2756: Heap-based Buffer Overflow

A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to...

CVE-2025-2755: Out-of-bounds Read

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument...

CVE-2025-2592

A flaw was found in the Open Asset Import Library assimp. In affected versions, a heap-based buffer overflow condition can be triggered when processing a malformed CSM file. This may lead to an application crash or other undefined behavior...