CVE-2025-3196
1 advisory.
PyPI/pyassimp CVE-2025-3196: medium 5.5, EPSS 0.31%
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD2Importer::InternReadFile in the library code/AssetLib/MD2/MD
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 5.4.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2025-170
- https://github.com/assimp/assimp/milestone/11
- https://vuldb.com/?id.303150
- https://vuldb.com/?submit.545368
- https://github.com/assimp/assimp/issues/6069
- https://github.com/assimp/assimp/issues/6069#issuecomment-2763273425
- https://vuldb.com/?ctiid.303150
CVE-2025-3196 · published · modified · JSON