A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/assimp/assimp/issues/6070 | Exploit Issue Tracking |
| https://github.com/user-attachments/files/19580481/Assimp_MD3Importer_ValidateSurfaceHeaderOffsets-hbo.zip | Exploit |
| https://vuldb.com/?ctiid.304590 | Permissions Required VDB Entry |
| https://vuldb.com/?id.304590 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.546414 | Third Party Advisory VDB Entry |
Configurations
History
23 Jul 2025, 09:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 |
17 Jul 2025, 21:40
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
| First Time |
Assimp assimp
Assimp |
|
| CPE | cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:* | |
| References | () https://vuldb.com/?id.304590 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?submit.546414 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.304590 - Permissions Required, VDB Entry | |
| References | () https://github.com/assimp/assimp/issues/6070 - Exploit, Issue Tracking | |
| References | () https://github.com/user-attachments/files/19580481/Assimp_MD3Importer_ValidateSurfaceHeaderOffsets-hbo.zip - Exploit |
14 Apr 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-14 03:15
Updated : 2025-07-23 09:15
NVD link : CVE-2025-3549
Mitre link : CVE-2025-3549
JSON object : View
Products Affected
assimp
- assimp
CWE
No CWE.