CVE-2025-15538CWE-119CWE-416

Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free

Medium · published January 18, 2026

CVSS v4.0
4.8
EPSS
0%
Percentile
9.1
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.

The record
Technical detail
CVSS v4.0
4.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00198 · 9.1th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-416 · Use After Free
Published
2026-01-18T23:02Z
EPSS history
Timeline
  • 18 JAN 23:02Z
    Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
    cvelistv5