Launch Week Day 1: Announcing Security Design Review
HIGH 7.8 PyPI

CVE-2025-3158

PYSEC-2025-169 · CVE-2025-3158

Published · Modified

Description

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Ready to move

Start Securing

Free, no credit card | First findings in minutes