CVE-2025-2752

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Mar 25, 2025

Updated: Mar 27, 2025

CWE ID 502

Summary

CVE-2025-2752 is a newly disclosed vulnerability affecting Open Asset Import Library Assimp version 5.4.3. The issue lies within the function fast_atoreal_move in the include/assimp/fast_atof.h component of the CSM File Handler. This vulnerability results in an out-of-bounds read, making it potentially exploitable. The manipulation can be initiated remotely, and the exploit has been made public, increasing the risk to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

BentoML

Affected Vendors

Atalaya

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/3wyoeh
https://www.cve.org/CVERecord?id=CVE-2025-2752
https://nvd.nist.gov/vuln/detail/CVE-2025-2752

Back to Vulnerability Database

Platform Features

Products

Use Cases

Teams

Industries

Services

Measuring the US-China AI Gap

TerraStealerV2 and TerraLogger: Golden Chickens' New Malware Families Discovered

Uncovering MintsLoader With Recorded Future Malware Intelligence Hunting

Know What Matters

For Customers

For Partners