CVE-2025-3159

Summary

CVE-2025-3159 is a critical vulnerability discovered in Open Asset Import Library Assimp 5.4.3. Specifically, it affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices in the file ASEParser.cpp of the ASE File Handler component. This issue results in a heap-based buffer overflow, which can be exploited locally. The exploit for this vulnerability has been made public, increasing the risk to affected systems. To mitigate this issue, it is strongly recommended to apply the patch with identifier e8a6286542924e628e02749c4f5ac4f91fdae71b as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.