Browse CVEs

MEDIUM 5.5 CVE-2025-2591 A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::I… Assimp Patch available Fix from $1,6002025-03-21 CRITICAL 9.8 CVE-2025-2152 A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::… Assimp No fix yet Fix from $2,3002025-03-10 HIGH 8.8 CVE-2025-2151 A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::GetNextLi… Assimp No fix yet Fix from $1,9502025-03-10 MEDIUM 6.2 CVE-2024-53425 A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain … Assimp No fix yet Fix from $1,6002024-11-21 HIGH 7.8 CVE-2024-48423 An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library. Assimp No fix yet Fix from $1,9502024-10-24 MEDIUM 6.2 CVE-2024-48426 A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer.… Assimp No fix yet Fix from $1,6002024-10-24 MEDIUM 5.5 CVE-2024-48424 A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during… Assimp No fix yet Fix from $1,6002024-10-24 MEDIUM 5.5 CVE-2024-48425 A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz t… Assimp No fix yet Fix from $1,6002024-10-24 HIGH 8.4 CVE-2024-45679 Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially… Assimp 5.4.3+ Fix from $1,9502024-09-18 HIGH 7.8 CVE-2024-40724 Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially… Assimp 5.4.2+ Fix from $1,9502024-07-19 HIGH 8.8 CVE-2022-45748 An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/C… Assimp No fix yet Fix from $1,9502023-01-20 MEDIUM 6.5 CVE-2022-38528 Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateM… Assimp No fix yet Fix from $1,6002022-09-06 MEDIUM 5.5 CVE-2021-45948 Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper:… Assimp No fix yet Fix from $1,6002022-01-01