{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.4.3"}],"component":"pyassimp","cve_ids":["CVE-2025-3549"],"ecosystem":"PyPI","epss":0.00278,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGNZWC06P71R8CBZTDBZAC","modified_at":"2026-05-21T15:00:17.601334409Z","published_at":"2025-04-14T03:15:16.823Z","references":["https://osv.dev/vulnerability/PYSEC-2025-171","https://vuldb.com/?id.304590","https://vuldb.com/?submit.546414","https://github.com/assimp/assimp/issues/6070","https://vuldb.com/?ctiid.304590","https://github.com/user-attachments/files/19580481/Assimp_MD3Importer_ValidateSurfaceHeaderOffsets-hbo.zip"],"severity":{"label":"low","score":3.3},"sources":[{"source":"osv","source_id":"PYSEC-2025-171","url":"https://osv.dev/vulnerability/PYSEC-2025-171"}],"summary":"A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/Asse"}