CVE-2025-2754

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A critical issue has been identified in the AC3D File Handler component, specifically in the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp. The manipulation of the it argument leads to a heap-based buffer overflow. This issue can be exploited remotely.

Recommendations For Open Asset Import Library Assimp version 5.4.3, consider disabling the Assimp::AC3DImporter::ConvertObjectSection function until a patch is available to prevent heap-based buffer overflow exploitation. Restrict access to the AC3D File Handler component to minimize the risk of remote attacks.