DEBIAN-CVE-2025-3549

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2025-3549
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2025-3549.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2025-3549
Upstream
Published
2025-04-14T03:15:16Z
Modified
2025-09-18T05:18:28Z
Summary
[none]
Details

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.

References

Affected packages

Debian:11 / assimp

Package

Name
assimp
Purl
pkg:deb/debian/assimp?arch=source

Affected ranges

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / assimp

Package

Name
assimp
Purl
pkg:deb/debian/assimp?arch=source

Affected ranges

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / assimp

Package

Name
assimp
Purl
pkg:deb/debian/assimp?arch=source

Affected ranges

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:14 / assimp

Package

Name
assimp
Purl
pkg:deb/debian/assimp?arch=source

Affected ranges

Ecosystem specific 

{
    "urgency": "not yet assigned"
}