CVE-2025-3160 MEDIUM

CVE-2025-3160: Open Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-bounds

Vendor Open Asset Import Library
Product Assimp
Weakness CWE-125
Published April 3, 2025
Last update April 3, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds read. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The patch is identified as a0993658f40d8e13ff5823990c30b43c82a5daf0. It is recommended to apply a patch to fix this issue.

Key dates

02Disclosure timeline

April 3, 2025 CVE published
April 3, 2025 Record updated