CVE-2025-3160

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A vulnerability has been found in the Open Asset Import Library Assimp, affecting the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the component File Handler. The manipulation leads to out-of-bounds read. An attack has to be approached locally.

Recommendations Apply the patch identified as a0993658f40d8e13ff5823990c30b43c82a5daf0 to fix this issue. As a temporary workaround, consider disabling the Assimp::SceneCombiner::AddNodeHashes function until the patch is applied.