Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-07-01T05:45:06 assimp: Assimp: Heap-based buffer overflow via crafted model file 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H CWE-787

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.

A flaw was found in Assimp, the Open Asset Import Library. A local attacker could exploit a vulnerability where specially crafted model files could cause a heap-based buffer overflow. This issue, occurring in the `SceneCombiner::Copy` function, could allow an attacker to gain unauthorized access to sensitive information or cause the application to crash, leading to a denial of service.

Successful exploitation requires local access and user interaction. An attacker must supply a specially crafted model file and rely on a user or an application to actively process it using the Assimp library. The impact of this vulnerability is localized specifically to the application parsing the malformed file. While it can lead to an application crash (Denial of Service) or localized information disclosure, it does not allow for privilege escalation, remote code execution, or a broader system-wide compromise. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Fix deferred qt6-qtquick3d Red Hat Enterprise Linux 9 Fix deferred qt5-qt3d https://www.cve.org/CVERecord?id=CVE-2025-15666 https://nvd.nist.gov/vuln/detail/CVE-2025-15666 https://github.com/assimp/assimp/issues/6079 https://vuldb.com/cve/CVE-2025-15666 https://vuldb.com/submit/844487 https://vuldb.com/vuln/374595 https://vuldb.com/vuln/374595/cti