CVE-2025-6119

216.73.216.86

· Published 16/06/2025 11:15 · Modified 16/06/2025 12:32

Labels: CVE-2025-6119 2025-06-16 CVE-2025-6119 CWE-119 [email protected]

Essential information

Published: 16/06/2025 11:15
Modified: 16/06/2025 12:32
Author: —
Creator: —
CVSS: 4.8 MEDIUM (v3) 4.8 MEDIUM (v4.0)
CISA KEV: No
CWE: —
CVSS vector: —

CVSS metrics

Description

A vulnerability classified as critical has been found in Open Asset Import Library Assimp up to 5.4.3. Affected is the function Assimp::BVHLoader::ReadNodeChannels in the library assimp/code/AssetLib/BVH/BVHLoader.cpp. The manipulation of the argument pNode leads to use after free. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.

NVD status

Status: Awaiting Analysis — CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.
Source: [email protected]
NVD: View on NVD

Affected products (CPE)

Product	CPE
assimp / assimp	`cpe:2.3:a:assimp:assimp:<5.4.3:::::::*`