CVE-2025-15666

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height lead...

CVE-2025-15666: Heap-based Buffer Overflow

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height lead...

OSV-2025-280 Heap-buffer-overflow in Assimp::SceneCombiner::CopyScene

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410393968 Crash type: Heap-buffer-overflow READ Crash state: Assimp::SceneCombiner::CopyScene Assimp::Exporter::Export Assimp::Exporter::ExportToBlob...

CVE-2025-3160

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds rea...

CVE-2025-3160: Out-of-bounds Read

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds rea...

CVE-2025-2753 Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible ...

OSV-2022-194 Heap-buffer-overflow in SuperFastHash

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=44964 Crash type: Heap-buffer-overflow READ 1 Crash state: SuperFastHash Assimp::SceneCombiner::AddNodePrefixesChecked Assimp::SceneCombiner::AddNodePrefixesChecked...

PT-2022-36850

Name of the Vulnerable Software and Affected Versions Assimp affected versions not specified Description The issue is related to a heap-buffer-overflow read, which can cause a crash. The crash occurs in the SuperFastHash function and involves the Assimp::SceneCombiner::AddNodePrefixesChecked...