CVE-2025-2152: Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2152?
CVE-2025-2152 is classified as a critical severity vulnerability.
How do I fix CVE-2025-2152?
To fix CVE-2025-2152, update Open Asset Import Library Assimp to the latest version that includes the security patch.
What impact does CVE-2025-2152 have on my system?
CVE-2025-2152 can lead to heap-based buffer overflow, potentially allowing attackers to execute arbitrary code.
Which version of Assimp is affected by CVE-2025-2152?
CVE-2025-2152 affects Open Asset Import Library Assimp version 5.4.3.
What component is vulnerable in CVE-2025-2152?
CVE-2025-2152 affects the File Handler component within the Assimp::BaseImporter::ConvertToUTF8 function.