CVE-2025-11275 MEDIUM

CVE-2025-11275: Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow

Vendor Open Asset Import Library
Product Assimp
Weakness CWE-122
Published October 5, 2025
Last update February 24, 2026
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used.

Key dates

02Disclosure timeline

October 5, 2025 CVE published
February 24, 2026 Record updated