CVE-2025-3015
1 advisory.
PyPI/pyassimp CVE-2025-3015: high 8.8, EPSS 0.50%
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-261
- https://vuldb.com/?id.302067
- https://vuldb.com/?submit.524589
- https://github.com/assimp/assimp/issues/6021
- https://github.com/assimp/assimp/issues/6021#issue-2877378829
- https://vuldb.com/?ctiid.302067
- https://github.com/assimp/assimp/commit/7c705fde418d68cca4e8eff56be01b2617b0d6fe
- https://github.com/assimp/assimp/pull/6045
CVE-2025-3015 · published · modified · JSON