CVE-2025-5201

A fuzzer test discovered a heap based buffer overflow in the Open Asset Import Library Assimp on version 5.4.3. The LWOImporter::CountVertsAndFacesLWO2 function in the assimp/code/AssetLib/LWO/LWOLoader.cpp file is affected. The manipulation leads to out-of-bounds read, which can lead to an application crash. The attacker needs to be local in order to exploit this vulnerability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.