Open Asset Import Library Assimp 5.4.3 - Out-of-Bounds Read in LWS File Handler
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-2753. PoCs published by exploitintel.
AI-analyzed exploit summary The repository contains functional exploit code demonstrating CVE-2025-2753, an uninitialized pointer array vulnerability in the Assimp LWS importer leading to out-of-bounds read and DoS. Multiple PoC scripts and detailed analysis documents are included.
Description
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Exploits (1)
The repository contains functional exploit code demonstrating CVE-2025-2753, an uninitialized pointer array vulnerability in the Assimp LWS importer leading to out-of-bounds read and DoS. Multiple PoC scripts and detailed analysis documents are included.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L