This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2025-3158 | BDVDB-2026-273259 Detail

Open Asset Import LibraryAssimp

Description#

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: local.

Weaknesses#

  • CWE-122 Heap-based Buffer Overflow
  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.