CVE-2025-15666CWE-119CWE-122

CVE-2025-15666

Medium · published July 1, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00124 · 1.9th percentile
Weaknesses
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-122 · Heap-based Buffer Overflow
Published
2026-07-01T11:16Z
References (5)
https://github.com/assimp/assimp/issues/6079 · [email protected]https://vuldb.com/cve/CVE-2025-15666 · [email protected]https://vuldb.com/submit/844487 · [email protected]https://vuldb.com/vuln/374595 · [email protected]https://vuldb.com/vuln/374595/cti · [email protected]
EPSS history
Timeline
  • 01 JUL 05:45Z
    Open Asset Import Library Assimp Model File SceneCombiner.cpp Copy heap-based overflow
    cvelistv5