Out-of-bounds Read Vulnerability in Open Asset Import Library by Assimp
CVE-2025-5169
Key Information:
- Vendor
Open Asset Import Library
- Status
- Vendor
- CVE Published:
- 26 May 2025
Badges
What is CVE-2025-5169?
A vulnerability has been identified in Open Asset Import Library (Assimp) version 5.4.3, specifically within the function MDLImporter::InternReadFile_3DGS_MDL345 located in the MDLLoader.cpp file. This issue can be exploited to perform out-of-bounds read operations, potentially enabling unauthorized access to sensitive data. The vulnerability necessitates local access for exploitation, raising the stakes for system security. The Assimp project embraces community collaboration to track and resolve such issues, consolidating all Fuzzer bugs into a central issue for future remediation.
Affected Version(s)
Assimp 5.4.3
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.