CVE-2025-3160
1 advisory.
PyPI/pyassimp CVE-2025-3160: low 3.3, EPSS 0.28%
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Co
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-264
- https://vuldb.com/?id.303106
- https://vuldb.com/?submit.542248
- https://github.com/assimp/assimp/issues/6025
- https://github.com/assimp/assimp/issues/6025#issue-2877385383
- https://vuldb.com/?ctiid.303106
- https://github.com/assimp/assimp/commit/a0993658f40d8e13ff5823990c30b43c82a5daf0
- https://github.com/assimp/assimp/pull/6049
CVE-2025-3160 · published · modified · JSON