CVE-2025-2752— Open Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-bounds
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-2752
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-bounds
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open Asset Import Library（assimp） 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open Asset Import Library（assimp）是Open Asset Import Library开源的一个库。 Open Asset Import Library（assimp） 5.4.3版本存在缓冲区错误漏洞，该漏洞源于存在越界读取。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Open Asset Import Library | Assimp | 5.4.3 | - |
II. Public POCs for CVE-2025-2752
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-2752
请登录查看更多情报信息。
- CVE-2025-2752 Open Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-bounds (Issue 6013)signaturepermissions-required
- Submit #517786: Open Asset Import Library Assimp >=5.4.3 Out-of-Bounds Readthird-party-advisory
- CVE-2025-2752 Open Asset Import Library Assimp CSM File fast_atof.h fast_atoreal_move out-of-bounds (Issue 6013)vdb-entrytechnical-description
- https://nvd.nist.gov/vuln/detail/CVE-2025-2752
Same Patch Batch · Open Asset Import Library · 2025-03-25 · 8 CVEs total
| CVE-2025-2750 | 6.3 MEDIUM | Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write |
| CVE-2025-2754 | 6.3 MEDIUM | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based ov |
| CVE-2025-2753 | 6.3 MEDIUM | Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds |
| CVE-2025-2755 | 6.3 MEDIUM | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection out-of-bounds |
| CVE-2025-2756 | 6.3 MEDIUM | Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based ov |
| CVE-2025-2757 | 6.3 MEDIUM | Open Asset Import Library Assimp MD5 File MD5Parser.cpp AI_MD5_PARSE_STRING_IN_QUOTATION h |
| CVE-2025-2751 | 4.3 MEDIUM | Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds |
IV. Related Vulnerabilities
Same product: Assimp
- CVE-2025-15538
Open Asset Import Library Assimp LWOMaterial.cpp FindUVChann - CVE-2025-11277
Open Asset Import Library Assimp Q3DLoader.cpp InternReadFil - CVE-2025-11275
Open Asset Import Library Assimp OpenDDLParserUtils.h getNex - CVE-2025-11274
Open Asset Import Library Assimp Q3DLoader.cpp InternReadFil - CVE-2025-6120
Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshe
Same vendor: Open Asset Import Library
- CVE-2025-15538
Open Asset Import Library Assimp LWOMaterial.cpp FindUVChann - CVE-2025-11277
Open Asset Import Library Assimp Q3DLoader.cpp InternReadFil - CVE-2025-11275
Open Asset Import Library Assimp OpenDDLParserUtils.h getNex - CVE-2025-11274
Open Asset Import Library Assimp Q3DLoader.cpp InternReadFil - CVE-2025-6120
Open Asset Import Library Assimp HL1MDLLoader.cpp read_meshe
Same weakness: CWE-125
- CVE-2026-8177
XML::LibXML versions through 2.0210 for Perl read out-of-bou - CVE-2026-6104
Global buffer over-read in mb_convert_encoding() with attack - CVE-2026-7258
Out-of-bounds read in urldecode() on NetBSD - CVE-2026-8186
Open5GS NF client.c ogs_sbi_client_send_via_scp_or_sepp out- - CVE-2026-3508
ASUS System Control Interface 缓冲区错误漏洞
V. Comments for CVE-2025-2752
No comments yet