CVE-2025-3159

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A critical issue was found in the ASE File Handler component, specifically affecting the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices in the file code/AssetLib/ASE/ASEParser.cpp. This leads to a heap-based buffer overflow. The attack must be launched locally.

Recommendations For Open Asset Import Library Assimp version 5.4.3, apply a patch to fix this issue. As a temporary workaround, consider disabling the Assimp::ASE::Parser::ParseLV4MeshBonesVertices function until a patch is available.