CVE-2025-70071

The Open Asset Import Library (Assimp) version 6.0.2 contains a vulnerability in the FBXParser.cpp file, specifically within the ParseVectorDataArray() method. A remote attacker can exploit this issue to cause a denial of service (DoS). While a vulnerability is present, some sources indicate that...

CVE-2025-70070

A denial of service vulnerability exists in the Assimp library (versions up to 6.0.2 ) within the FBX Importer component. The flaw is located in the FBXMeshGeometry.cpp file, specifically within the MeshGeometry::MeshGeometry() method. A remote attacker can exploit this issue to cause a service i...

CVE-2025-70072

The Assimp library (version 6.0.2 ) is vulnerable to a denial of service (DoS) caused by an issue in the FBXConverter.cpp file within the FBXConverter::ConvertMeshMultiMaterial() component. This flaw allows a remote attacker to trigger the DoS condition. While the vulnerability is acknowledged in...

CVE-2025-70067

A buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) versions up to 6.0.2 within the FBX Importer . The flaw is located in the aiMaterial::AddBinaryProperty function, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strc...

CVE-2025-70069

The Assimp library (versions up to v.6.0.2 ) is vulnerable to a denial of service (DoS) that can be triggered by a remote attacker. The flaw is located in the FBXConverter.cpp file within the ConvertMeshMultiMaterial() method. While the vulnerability is present in several packages, including qt5-...

CVE-2025-70067

Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...

CVE-2025-70071: Uncontrolled Resource Consumption

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...

CVE-2025-70072: Out-of-bounds Read

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

CVE-2025-70070: NULL Pointer Dereference

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

CVE-2025-70069: Uncontrolled Resource Consumption

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial method...

CVE-2025-70067: Heap-based Buffer Overflow

Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...

CVE-2025-70067

Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...

CVE-2025-70069

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial method...

CVE-2025-70070

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...

CVE-2025-70071

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...

CVE-2025-70072

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

EUVD-2025-209622

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp, FBXConverter::ConvertMeshMultiMaterial components...

JLSEC-2026-190

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

JLSEC-2026-188

Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...

JLSEC-2026-197

A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function readmeshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to...