VYPR
Low severity3.3NVD Advisory· Published May 26, 2025· Updated Jun 17, 2026

CVE-2025-5169

CVE-2025-5169

Description

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Assimp/Assimp2 versions
    cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*
    • (no CPE)range: <5.4.3
  • <5.4.3+ 1 more
    • (no CPE)range: <5.4.3
    • (no CPE)range: 5.4.3

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.