CVE-2025-11275
A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used.
- Score
- CVSS 3.1 7.8 High
- Status
- Analyzed - cna@vuldb.com
- Published
- 2025-10-05
- Last modified
- 2026-10-11
- Weaknesses
- CWE-119, CWE-122
Affected products
References
- https://vuldb.com/?id.327009
- https://vuldb.com/?ctiid.327009
- https://vuldb.com/?submit.658675
- https://github.com/assimp/assimp/issues/6357
- https://github.com/user-attachments/files/22417682/poc.zip
