Security update for assimp (important)

openSUSE security update: security update for assimp ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20781-1 Rating: important References: bsc1239220 bsc1239916 bsc1239920 bsc1240412 bsc1241367 Cross-References: CVE-2025-2151 CVE-2025-2591...

OESA-2026-2456 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

OESA-2026-2455 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

OESA-2026-2457 assimp security update

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fixes: A vulnerability, which was classifie...

assimp:assimp_fuzzer: Use-of-uninitialized-value in aiMatrix4x4t<float>::Decompose

Detailed Report: https://oss-fuzz.com/testcase?key=5370859673157632 Project: assimp Fuzzing Engine: libFuzzer Fuzz Target: assimpfuzzer Job Type: libfuzzermsanassimp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: aiMatrix4x4t::Decompose...

assimp:assimp_fuzzer: Heap-buffer-overflow in inflate

Detailed Report: https://oss-fuzz.com/testcase?key=6437434371145728 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x75d3f08e1708 Crash State: inflate...

assimp-devel-6.0.5-2.1 on GA media (moderate)

assimp-devel-6.0.5-2.1 on GA media Announcement ID: openSUSE-SU-2026:10739-1 Rating: moderate Cross-References: CVE-2025-70067 CVSS scores: CVE-2025-70067 SUSE : 7 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-70067 SUSE : 7.3 CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:...

OPENSUSE-SU-2026:10739-1 assimp-devel-6.0.5-2.1 on GA media

These are all security issues fixed in the assimp-devel-6.0.5-2.1 package on the GA media of openSUSE Tumbleweed...

assimp:assimp_fuzzer: Heap-buffer-overflow in Assimp::BlenderImporter::ConvertMesh

Detailed Report: https://oss-fuzz.com/testcase?key=4976058394017792 Project: assimp Fuzzing Engine: afl Fuzz Target: assimpfuzzer Job Type: aflasanassimp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x761e07fe9fb8 Crash State: Assimp::BlenderImporter::ConvertMesh...

SUSE CVE-2025-70067

Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...

SUSE CVE-2025-70069

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial method...

SUSE CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

SUSE CVE-2025-70071

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...

SUSE CVE-2025-70072

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

Linux Distros Unpatched Vulnerability : CVE-2025-70071

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray CVE-2025-70071 Note that Nessus...

Linux Distros Unpatched Vulnerability : CVE-2025-70070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry CVE-2025-70070 Note tha...

Linux Distros Unpatched Vulnerability : CVE-2025-70072

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

Linux Distros Unpatched Vulnerability : CVE-2025-70069

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial method CVE-2025-70069 Not...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the ParseVectorDataArray function in FBXParser.cpp. An attacker can cause the application to crash or become unresponsive by providing specially crafted input data. Remediation There is no fixed version for...

CVE-2025-70071

A flaw was found in Assimp. A remote attacker can exploit a vulnerability in the FBXParser.cpp file, specifically within the ParseVectorDataArray function, to cause a denial of service. This can lead to the affected application becoming unresponsive or crashing, disrupting its availability...