CVE-2025-2753

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A critical issue has been identified, affecting the function SceneCombiner::MergeScenes of the component LWS File Handler. This issue leads to an out-of-bounds read and can be exploited remotely. The exploit has been publicly disclosed.

Recommendations For Open Asset Import Library Assimp version 5.4.3, as a temporary workaround, consider disabling the SceneCombiner::MergeScenes function until a patch is available. Restrict access to the LWS File Handler component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.