CVE-2025-3159

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is e8a6286542924e628e02749c4f5ac4f91fdae71b. It is recommended to apply a patch to fix this issue.

The following products are affected by CVE-2025-3159 vulnerability.

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-3159.

URL	Resource
https://github.com/assimp/assimp/issues/6024
https://github.com/assimp/assimp/issues/6024#issue-2877382033
https://github.com/assimp/assimp/pull/6051
https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b
https://nvd.nist.gov/vuln/detail/CVE-2025-3159
https://vuldb.com/?ctiid.303105
https://vuldb.com/?id.303105
https://vuldb.com/?submit.542247
https://www.cve.org/CVERecord?id=CVE-2025-3159