CVE-2025-2152
Description
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Risk Information
Base Score
6.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
0.234
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| qt5-qt3d Security Update (ALAS-2025-2848) qt5-qt3d-examples-5.15.3-1.amzn2.0.5.x86_64.rpm | Linux |
| qt5-qt3d Security Update (ALAS-2025-2848) qt5-qt3d-devel-5.15.3-1.amzn2.0.5.x86_64.rpm | Linux |
| qt5-qt3d Security Update (ALAS-2025-2848) qt5-qt3d-5.15.3-1.amzn2.0.5.x86_64.rpm | Linux |
| qt5-qt3d Security Update (ALAS-2025-2848) qt5-qt3d-5.15.3-1.amzn2.0.5.i686.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234