CVE-2025-2152

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A critical issue has been found in the Open Asset Import Library Assimp, affecting the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp in the File Handler component. This issue leads to a heap-based buffer overflow and can be initiated remotely.

Recommendations For Open Asset Import Library Assimp version 5.4.3, as a temporary workaround, consider disabling the Assimp::BaseImporter::ConvertToUTF8 function until a patch is available. Restrict access to the File Handler component to minimize the risk of exploitation.