Advisory ROSA-SA-2025-2990

software: assimp 5.0.1 OS: ROSA-CHROME unaffected versions = assimp-5.0.1.1-7 affected versions assimp-5.0.1.1-7 CVE-ID: CVE-2025-3548 BDU-ID: 2025-07019 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the File Handler component of the cross-platform 3D model import library Assimp Open Asset Impor...

CVE-2025-3548

A flaw was found in Open Asset Import Library Assimp. This issue affects the aiString::Set function in the library, include/assimp/types.h of the component File Handler. Manipulation leads to a heap-based buffer overflow. Mitigation Mitigation for this issue is either not available or the current...

CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

CVE-2025-3548

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

CVE-2025-3548 Open Asset Import Library Assimp File types.h Set heap-based overflow

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possibl...

CVE-2025-3548

Open Asset Import Library Assimp (up to 5.4.3) is affected by a heap-based buffer overflow in aiString::Set (types.h, File Handler). The vulnerability permits a local attacker to trigger a crash or potentially exploit the host; the exploit has been publicly disclosed. Remediation: upgrade to a ne...