CVE-2025-2751

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads to an out-of-bounds read. The attack can be initiated remotely.

Recommendations For Open Asset Import Library Assimp version 5.4.3, consider disabling the Assimp::CSMImporter::InternReadFile function until a patch is available to prevent out-of-bounds read. Restrict access to the CSM File Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.