CVE-2025-5201

Name of the Vulnerable Software and Affected Versions Open Asset Import Library Assimp version 5.4.3

Description A vulnerability was found in the Open Asset Import Library Assimp. It has been classified as problematic and affects the function LWOImporter::CountVertsAndFacesLWO2 of the file assimp/code/AssetLib/LWO/LWOLoader.cpp. The manipulation leads to out-of-bounds read. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

Recommendations As a temporary workaround, consider disabling the LWOImporter::CountVertsAndFacesLWO2 function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.