CVE-2025-3159
1 advisory.
PyPI/pyassimp CVE-2025-3159: high 7.8
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetL
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-263
- https://vuldb.com/?id.303105
- https://vuldb.com/?submit.542247
- https://github.com/assimp/assimp/issues/6024
- https://github.com/assimp/assimp/issues/6024#issue-2877382033
- https://vuldb.com/?ctiid.303105
- https://github.com/assimp/assimp/pull/6051
- https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b
CVE-2025-3159 · published · modified · JSON