CVE-2025-15538: fallo de gravedad media en Open Asset Import Library Assimp
Open Asset Import Library Assimp LWOMaterial.cpp FindUVChannels use after free
Publicada el · Actualizada el
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.8epss 0.2%
probabilidad de explotación
0.2%top 92% de las CVE
explotación observada
noninguna fuente lo reporta
A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2. Affected by this vulnerability is the function Assimp::LWOImporter::FindUVChannels of the file /src/assimp/code/AssetLib/LWO/LWOMaterial.cpp. Such manipulation leads to use after free. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Open Asset Import Library · AssimpCVEs relacionadas — Open Asset Import Library Assimp
En el mismo producto, de las más peligrosas a las menos.
CVE-2025-2751MEDIUMOpen Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-boundsEPSS 0.8%CVE-2025-2592MEDIUMOpen Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflowEPSS 0.7%CVE-2025-2752MEDIUMOpen Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-boundsEPSS 0.7%CVE-2025-2591MEDIUMOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 divide by zeroEPSS 0.6%CVE-2025-3016MEDIUMOpen Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumptionEPSS 0.6%CVE-2025-2756MEDIUMOpen Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflowEPSS 0.6%