CVE-2025-2756: Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2756?
CVE-2025-2756 is classified as a critical vulnerability.
How does CVE-2025-2756 affect Open Asset Import Library Assimp?
CVE-2025-2756 affects the Assimp::AC3DImporter::ConvertObjectSection function in the AC3D File Handler.
What versions of Open Asset Import Library Assimp are affected by CVE-2025-2756?
CVE-2025-2756 affects version 5.4.3 of Open Asset Import Library Assimp.
What type of attacks are enabled by CVE-2025-2756?
CVE-2025-2756 may allow attackers to manipulate the object section leading to potential exploitation.
Is there a way to mitigate CVE-2025-2756?
To mitigate CVE-2025-2756, it is advised to update to a patched version of Open Asset Import Library Assimp.