CVE-2025-2753CWE-119CWE-125
Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds
Medium · published March 25, 2025
What it is
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
The record
Technical detail
- CVSS v4.0
- 5.3 · MEDIUM
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
- EPSS
- 0.00496 · 41.7th percentile
- Weaknesses
- CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer; CWE-125 · Out-of-bounds Read
- Published
- 2025-03-25T08:31Z
EPSS history
Timeline