CVE-2025-2757
1 advisory.
PyPI/pyassimp CVE-2025-2757: high 8.8, EPSS 0.54%
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Pa
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-168
- https://vuldb.com/?id.300862
- https://vuldb.com/?submit.517817
- https://github.com/assimp/assimp/issues/6019
- https://github.com/assimp/assimp/issues/6019#issue-2877376386
- https://vuldb.com/?ctiid.300862
CVE-2025-2757 · published · modified · JSON