CVE-2025-2755
Description
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.entries leads to out-of-bounds read. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Risk Information
Base Score
6.3
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
Exploitation Probability
0.168
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| apache-commons-vfs Security Update (ALAS-2025-2842) apache-commons-vfs-javadoc-2.0-11.amzn2.0.2.noarch.rpm | Linux |
| apache-commons-vfs Security Update (ALAS-2025-2842) apache-commons-vfs-examples-2.0-11.amzn2.0.2.noarch.rpm | Linux |
| apache-commons-vfs Security Update (ALAS-2025-2842) apache-commons-vfs-2.0-11.amzn2.0.2.noarch.rpm | Linux |
| apache-commons-vfs Security Update (ALAS-2025-2842) apache-commons-vfs-ant-2.0-11.amzn2.0.2.noarch.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234