CVE-2025-70067: Buffer Overflow
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-70067?
CVE-2025-70067 has a high severity rating due to its potential for causing buffer overflow attacks.
How do I fix CVE-2025-70067?
To fix CVE-2025-70067, upgrade Assimp to version 6.0.3 or greater where the vulnerability has been addressed.
What versions of Assimp are affected by CVE-2025-70067?
Assimp versions up to and including 6.0.2 are affected by CVE-2025-70067.
How does CVE-2025-70067 exploit a buffer overflow?
CVE-2025-70067 exploits a buffer overflow by using strcpy() to copy an unchecked property key string into a fixed-size heap buffer.
What impact does CVE-2025-70067 have on applications?
CVE-2025-70067 can lead to application crashes or code execution due to memory corruption caused by the buffer overflow.