Low severity3.3NVD Advisory· Published May 26, 2025· Updated Jun 17, 2026

CVE-2025-5200

Description

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Assimp/Assimp2 versions
cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:*range: <5.4.3
- (no CPE)range: =5.4.3
Open Asset Import Library/assimpllm-fuzzy2 versions
=5.4.3+ 1 more
- (no CPE)range: =5.4.3
- (no CPE)range: 5.4.3
osv-coords
pkg:rpm/opensuse/assimp&distro=openSUSE%20Tumbleweed
Range: < 6.0.4-1.1

Patches

Vulnerability mechanics

References

github.com/assimp/assimp/issues/6172nvdExploitIssue Tracking
vuldb.comnvdPermissions RequiredThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
github.com/assimp/assimp/issues/6128nvdIssue Tracking

News mentions

No linked articles in our index yet.

cvss	0.214
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000