Denial of Service Vulnerability in Assimp by Asset Import Library
CVE-2025-70070

6.5MEDIUM

Key Information:

Vendor

Assimp

Status
Assimp
Vendor
CVE Published:
4 May 2026

What is CVE-2025-70070?

An issue in Assimp version 6.0.2 allows remote attackers to exploit the vulnerability through crafted FBXMeshGeometry files. This can lead to unexpected application behavior and service disruptions.

References

http://assimp.com
https://gist.github.com/GunP4ng/a2118ba977b10074a4477322a...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.