PyPI/pyassimp CVE-2025-3549: low 3.3, EPSS 0.28%
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/Asse
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-171
- https://vuldb.com/?id.304590
- https://vuldb.com/?submit.546414
- https://github.com/assimp/assimp/issues/6070
- https://vuldb.com/?ctiid.304590
- https://github.com/user-attachments/files/19580481/Assimp_MD3Importer_ValidateSurfaceHeaderOffsets-hbo.zip
CVE-2025-3549 · published · modified · JSON