CVE-2025-2591
1 advisory.
PyPI/pyassimp CVE-2025-2591: medium 5.5
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-160
- https://vuldb.com/?id.300574
- https://vuldb.com/?submit.517781
- https://github.com/assimp/assimp/issues/6009
- https://github.com/assimp/assimp/issues/6009#issue-2877367021
- https://vuldb.com/?ctiid.300574
- https://github.com/assimp/assimp/pull/6047
- https://github.com/assimp/assimp/pull/6047/commits/ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd
CVE-2025-2591 · published · modified · JSON