CVE-2025-11275

A flaw was found in assimp. Processing a specially crafted input file can trigger a heap-based buffer overflow due to a parser error, causing a crash to the application linked to the library and resulting in a denial of service.

To exploit this issue, an attacker needs to be able to process a specially crafted input file with the application linked to the assimp library. Additionally, this issue can cause an out-of-bounds read of only 1 byte, limiting the impact of this vulnerability, potentially resulting only in a denial of service. Due to these reasons, this flaw has been rated with a moderate severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.