1556 matches found
CVE-2025-70067
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...
PT-2026-36827
Name of the Vulnerable Software and Affected Versions Assimp version 6.0.2 Description A remote attacker can cause a denial of service through the ParseVectorDataArray function within the FBXParser.cpp file. Recommendations At the moment, there is no information about a newer version that contain...
PT-2026-36809
Name of the Vulnerable Software and Affected Versions Assimp version 6.0.2 Description An issue allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp file and the MeshGeometry function. Recommendations At the moment, there is no information about a newer version that...
CVE-2025-70067
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...
CVE-2025-70070
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry...
CVE-2025-70067: Heap-based Buffer Overflow
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...
CVE-2025-70071
An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray...
CVE-2025-70071
The Open Asset Import Library (Assimp) version 6.0.2 contains a vulnerability in the FBXParser.cpp file, specifically within the ParseVectorDataArray() method. A remote attacker can exploit this issue to cause a denial of service (DoS). While a vulnerability is present, some sources indicate that...
CVE-2025-70070
A denial of service vulnerability exists in the Assimp library (versions up to 6.0.2 ) within the FBX Importer component. The flaw is located in the FBXMeshGeometry.cpp file, specifically within the MeshGeometry::MeshGeometry() method. A remote attacker can exploit this issue to cause a service i...
CVE-2025-70072
The Assimp library (version 6.0.2 ) is vulnerable to a denial of service (DoS) caused by an issue in the FBXConverter.cpp file within the FBXConverter::ConvertMeshMultiMaterial() component. This flaw allows a remote attacker to trigger the DoS condition. While the vulnerability is acknowledged in...
CVE-2025-70067
A buffer overflow vulnerability exists in the Open Asset Import Library (Assimp) versions up to 6.0.2 within the FBX Importer . The flaw is located in the aiMaterial::AddBinaryProperty function, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strc...
CVE-2025-70069
The Assimp library (versions up to v.6.0.2 ) is vulnerable to a denial of service (DoS) that can be triggered by a remote attacker. The flaw is located in the FBXConverter.cpp file within the ConvertMeshMultiMaterial() method. While the vulnerability is present in several packages, including qt5-...
CVE-2025-70067
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...
EUVD-2025-209616
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy without runtime length validation...
JLSEC-2026-190
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...
JLSEC-2026-188
Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product...
JLSEC-2026-197
A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function readmeshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to...
JLSEC-2026-192
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be...
JLSEC-2026-191
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFileQuake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attac...