Logo
›
›vulnerability›CVE-2025-15538
Name
CVE-2025-15538
Source
NVD ( link)Debian ( link)
Description
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.
CWEs
CWE-119 CWE-416
Published Date
Updated Date
Workaround
-
Advisories
https://github.com/assimp/assimp/issues/6258Exploit
https://github.com/assimp/assimp/issues/6258#issuecomment-3070999530Exploit
https://github.com/user-attachments/files/21216542/assimp_poc10.zipExploit
https://vuldb.com/?ctiid.341727Permissions Required
https://vuldb.com/?id.341727VDB Entry
https://vuldb.com/?submit.735232VDB Entry

Analysis#

Affected Component
Analysis
assimp
Exploitable

Vulnerability Ratings#

1.9
CVSSv4
5.3
CVSSv31
7.8
CVSSv31
4.3
CVSSv2
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
assimp
buildroot
2025.02.x
6.0.2
Exploitable
assimp
buildroot
master
6.0.2
Exploitable