AS
Product
assimp
70
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 1High 25Medium 36Low 8
Watch
Add assimp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-2152 | 9.8 | Mar 10 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-3015 | 8.8 | Mar 31 | A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2757 | 8.8 | Mar 25 | A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2756 | 8.8 | Mar 25 | A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2755 | 8.8 | Mar 25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2754 | 8.8 | Mar 25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2753 | 8.8 | Mar 25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2752 | 8.8 | Mar 25 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic Affected: 5.4.3 |
| CVE-2025-2751 | 8.8 | Mar 25 | A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic Affected: 5.4.3 |
| CVE-2025-2750 | 8.8 | Mar 25 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2592 | 8.8 | Mar 21 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2151 | 8.8 | Mar 10 | A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2022-45748 | 8.8 | Jan 20 | An issue was discovered with assimp 5.1.4, a use after free occurred in function ColladaParser::ExtractDataObjectFromChannel in file /code/AssetLib/Collada/ColladaParser.cpp Affected: 5.1.4 |
| CVE-2024-45679 | 8.4 | Sep 18 | Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.3 allows a local attacker to execute arbitrary code by importing a specially crafted file into the product Affected: before 5.4.3 |
| CVE-2025-15538 | 7.8 | Jan 18 | A security vulnerability has been detected in Open Asset Import Library Assimp up to 6.0.2 Affected: through 6.0.2 |
| CVE-2025-11277 | 7.8 | Oct 5 | A weakness has been identified in Open Asset Import Library Assimp 6.0.2 Affected: 6.0.2 |
| CVE-2025-11275 | 7.8 | Oct 5 | A vulnerability was identified in Open Asset Import Library Assimp 6.0.2 Affected: 6.0.2 |
| CVE-2025-5204 | 7.8 | May 26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3 Affected: before 5.4.3 |
| CVE-2025-5203 | 7.8 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: before 5.4.3 |
| CVE-2025-5202 | 7.8 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: before 5.4.3 |
| CVE-2025-5201 | 7.8 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: before 5.4.3 |
| CVE-2025-5200 | 7.8 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic Affected: before 5.4.3 |
| CVE-2025-3159 | 7.8 | Apr 3 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-3158 | 7.8 | Apr 3 | A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2024-48423 | 7.8 | Oct 24 | An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library Affected: 5.4.3 |
| CVE-2024-40724 | 7.8 | Jul 19 | Heap-based buffer overflow vulnerability in Assimp versions prior to 5.4.2 allows a local attacker to execute arbitrary code by inputting a specially crafted file into the product Affected: before 5.4.2 |
| CVE-2025-3016 | 6.5 | Mar 31 | A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2022-38528 | 6.5 | Sep 6 | Open Asset Import Library (assimp) commit 3c253ca was discovered to contain a segmentation violation via the component Assimp::XFileImporter::CreateMeshes Affected: 5.2.5 |
| CVE-2026-19999 | 6.3 | Aug 17 | Open Asset Import Library Assimp 3DGS MDL7 Bone Transformation Key MDLLoader.cpp ParseBoneTrafoKeys_3DGS_MDL7 buffer overflow Affected: 17c12da |
| CVE-2026-19970 | 6.3 | Aug 17 | Open Asset Import Library Assimp Node MDLLoader.cpp AddBonesToNodeGraph_3DGS_MDL7 heap-based overflow Affected: 17c12da |
| CVE-2026-19967 | 6.3 | Aug 17 | Open Asset Import Library Assimp File Compression.cpp decompressBlock heap-based overflow Affected: 17c12da |
| CVE-2026-14604 | 6.3 | Jul 3 | Open Asset Import Library Assimp PLY Model PlyLoader.cpp ExportToBlob double free Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4 |
| CVE-2024-53425 | 6.2 | Nov 21 | A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3 Affected: 5.4.3 |
| CVE-2024-48426 | 6.2 | Oct 24 | A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer Affected: 5.4.3 |
| CVE-2026-117608 New | 6.1 | Oct 28 | Assimp through 6.0.5 Heap Out-of-Bounds Read via MD2 Importer Integer Overflow Affected: through 6.0.5 |
| CVE-2026-111129 | 5.5 | Oct 15 | Assimp through 6.0.5 NULL Pointer Dereference via Ogre Animation Track Affected: through 6.0.5 |
| CVE-2026-111128 | 5.5 | Oct 15 | Assimp through 6.0.5 NULL Pointer Dereference via Ogre Importer Bone Assignment Affected: through 6.0.5 |
| CVE-2026-108573 | 5.5 | Oct 11 | Open Asset Import Library Assimp PLY File getNextBlock out-of-bounds Affected: 6.0.0; 6.0.1; 6.0.2; 6.0.3; 6.0.4; 6.0.5 |
| CVE-2025-11274 | 5.5 | Oct 5 | A vulnerability was determined in Open Asset Import Library Assimp 6.0.2 Affected: 6.0.2 |
| CVE-2025-5169 | 5.5 | May 26 | A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-5168 | 5.5 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-5167 | 5.5 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-5166 | 5.5 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-5165 | 5.5 | May 26 | A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic Affected: 5.4.3 |
| CVE-2025-3196 | 5.5 | Apr 4 | A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2025-2591 | 5.5 | Mar 21 | A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3 Affected: 5.4.3 |
| CVE-2024-48425 | 5.5 | Oct 24 | A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer Affected: 5.4.3 |
| CVE-2024-48424 | 5.5 | Oct 24 | A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX… Affected: 5.4.3 |
| CVE-2021-45948 | 5.5 | Jan 1 | Open Asset Import Library (aka assimp) 5.1.0 and 5.1.1 has a heap-based buffer overflow in _m3d_safestr (called from m3d_load and Assimp::M3DWrapper::M3DWrapper) Affected: 5.1.0; 5.1.1 |
| CVE-2026-19969 | 5.4 | Aug 17 | Open Asset Import Library Assimp 3DGS MDL7 Model Output Mesh Generator MDLLoader.cpp GenerateOutputMeshes_3DGS_MDL7 buffer overflow Affected: 17c12da |