CVE-2025-15538 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::…
Medium CVSS: 4.8

CVE-2025-15538

A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.
Vendor
Assimp
Product
Assimp
CWE
CWE-119
Yayın Tarihi
2026-01-18 23:15:47
Güncelleme
2026-02-10 17:10:23
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-119 Assimp MEDIUM Assimp 2026

Referanslar

https://github.com/assimp/assimp/issues/6258 https://github.com/assimp/assimp/issues/6258#issuecomment-3070999530 https://github.com/user-attachments/files/21216542/assimp_poc10.zip https://vuldb.com/?ctiid.341727 https://vuldb.com/?id.341727 https://vuldb.com/?submit.735232