CVE-2025-70067

A flaw was found in Assimp, an open-source asset import library, specifically within its FBX Importer. This buffer overflow vulnerability occurs when processing a specially crafted FBX file. An attacker could exploit this by providing a malicious FBX file, causing a property key string to be copied into a fixed-size memory buffer without proper length validation. This could lead to a denial of service or potentially arbitrary code execution, allowing an attacker to run unauthorized commands.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.