PyPI/pyassimp CVE-2025-2152: critical 9.8, EPSS 0.53%
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporte
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-159
- https://vuldb.com/?id.299063
- https://vuldb.com/?submit.510818
- https://github.com/assimp/assimp/issues/6027
- https://github.com/assimp/assimp/issues/6027#issue-2877629241
- https://vuldb.com/?ctiid.299063
CVE-2025-2152 · published · modified · JSON