CVE-2025-3016

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A problematic vulnerability was found in the Open Asset Import Library Assimp. This issue affects the function Assimp::MDLImporter::ParseTextureColorData of the MDL File Handler component. The manipulation of the arguments mWidth and mHeight leads to resource consumption. The attack can be initiated remotely.

Recommendations For Open Asset Import Library Assimp version 5.4.3, upgrade to version 6.0 to address this issue. As a temporary workaround, consider restricting the use of the Assimp::MDLImporter::ParseTextureColorData function until the patch is applied.