PyPI/pyassimp CVE-2025-5169: medium 5.5, EPSS 0.26%
A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/M
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-176
- https://vuldb.com/?id.310257
- https://vuldb.com/?submit.578004
- https://github.com/assimp/assimp/issues/6128
- https://vuldb.com/?ctiid.310257
- https://github.com/assimp/assimp/issues/6171
- https://github.com/user-attachments/files/20208891/reproducer.zip
CVE-2025-5169 · published · modified · JSON