CVE-2025-5166: Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5166?
CVE-2025-5166 is classified as a problematic vulnerability in Open Asset Import Library Assimp 5.4.3.
How do I fix CVE-2025-5166?
To fix CVE-2025-5166, you should update to a patched version of Open Asset Import Library Assimp that addresses this vulnerability.
What component is affected by CVE-2025-5166?
CVE-2025-5166 affects the MDC File Parser component in the function MDCImporter::InternReadFile.
What software does CVE-2025-5166 impact?
CVE-2025-5166 impacts Open Asset Import Library Assimp version 5.4.3.
What type of vulnerability is CVE-2025-5166?
CVE-2025-5166 is classified as a problematic vulnerability due to potential exploitation risks.