CVE-2025-5169: Open Asset Import Library Assimp MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile3DGSMDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-5169?
CVE-2025-5169 is classified as problematic due to the potential for out-of-bounds read vulnerabilities.
How does CVE-2025-5169 affect Open Asset Import Library Assimp?
CVE-2025-5169 affects the MDLImporter::InternReadFile_3DGS_MDL345 function in the Assimp library, leading to potential security issues.
What are the potential consequences of CVE-2025-5169?
Exploitation of CVE-2025-5169 could result in unauthorized access or information disclosure through out-of-bounds reads.
How do I fix CVE-2025-5169?
To fix CVE-2025-5169, you should update to the latest version of Open Asset Import Library Assimp where this vulnerability is addressed.
Is local access required to exploit CVE-2025-5169?
Yes, exploiting CVE-2025-5169 requires local access to the system running Open Asset Import Library Assimp.