CVE-2025-2152
published 2025-03-10CVE-2025-2152: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function…
PriorityP262critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.48%
38.6th percentile
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| assimp | assimp | — | — |
| assimp | assimp | >= 0 < 6.0.2+ds-1 | 6.0.2+ds-1 |
| debian | assimp | < assimp 6.0.2+ds-1 (forky) | assimp 6.0.2+ds-1 (forky) |
| linux | linux_kernel | >= 3.14.0 < 5.4.302 | 5.4.302 |
| linux | linux_kernel | >= 5.11.0 < 5.15.197 | 5.15.197 |
| linux | linux_kernel | >= 5.16.0 < 6.1.159 | 6.1.159 |
| linux | linux_kernel | >= 5.5.0 < 5.10.247 | 5.10.247 |
| linux | linux_kernel | >= 6.13.0 < 6.17.9 | 6.17.9 |
| linux | linux_kernel | >= 6.2.0 < 6.6.117 | 6.6.117 |
| linux | linux_kernel | >= 6.7.0 < 6.12.59 | 6.12.59 |
| open_asset_import_library | assimp | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Vulnerable function target: Assimp::BaseImporter::ConvertToUTF8 in BaseImporter.cpp — heap-based buffer overflow triggered via malicious file input to the File Handler component
- ·Vulnerability affects Assimp 5.4.3 specifically; fixed in version 6.0.2+ds-1 (Debian sid/forky). Debian bookworm, bullseye, and trixie remain open/unpatched as of disclosure. ↗
- ·Attack can be initiated remotely despite Debian scope classification of 'local' — exploit has been publicly disclosed. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv4.05.3MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv5.3MEDIUM
vendor_debian5.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
osv·2025-12-06
CVE-2025-40282 Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local
header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW
Add missing skb_reset_mac_header() for uncompressed ipv6 RX path.
For the compressed one, it is done in lowpan_header_decompress().
Log: (BlueZ 6lowpan-tester Client Recv Raw - Success)
kernel BUG at net/core/skbuff.c:212!
Call Trace:
...
packet_rcv (net/packet/af_packet.c:2152)
...
__local_bh_enable_ip (kernel/softirq.c:407)
netif_rx (net/core/dev.c:5648)
chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359)
GHSA
GHSA-38j2-f744-46qw: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5
ghsa_unreviewed·2025-03-10
CVE-2025-2152 [MEDIUM] CWE-119 GHSA-38j2-f744-46qw: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
OSV
CVE-2025-2152: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5
osv·2025-03-10·CVSS 5.3
CVE-2025-2152 [MEDIUM] CVE-2025-2152: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Red Hat
kernel: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
vendor_redhat·2025-12-06
CVE-2025-40282 kernel: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
kernel: Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
In the Linux kernel, the following vulnerability has been resolved:
Bluetooth: 6lowpan: reset link-local header on ipv6 recv path
Bluetooth 6lowpan.c netdev has header_ops, so it must set link-local
header for RX skb, otherwise things crash, eg. with AF_PACKET SOCK_RAW
Add missing skb_reset_mac_header() for uncompressed ipv6 RX path.
For the compressed one, it is done in lowpan_header_decompress().
Log: (BlueZ 6lowpan-tester Client Recv Raw - Success)
kernel BUG at net/core/skbuff.c:212!
Call Trace:
...
packet_rcv (net/packet/af_packet.c:2152)
...
__local_bh_enable_ip (kernel/softirq.c:407)
netif_rx (net/core/dev.c:5648)
chan_recv_cb (net/bluetooth/6lowpan.c:294 net/bluetooth/6lowpan.c:359)
Package: kernel (Red Hat E
Debian
CVE-2025-2152: assimp - A vulnerability, which was classified as critical, has been found in Open Asset ...
vendor_debian·2025·CVSS 5.3
CVE-2025-2152 [MEDIUM] CVE-2025-2152: assimp - A vulnerability, which was classified as critical, has been found in Open Asset ...
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Scope: local
bookworm: open
bullseye: open
forky: resolved (fixed in 6.0.2+ds-1)
sid: resolved (fixed in 6.0.2+ds-1)
trixie: open
No detection rules found.
No public exploits indexed.
2025-03-10
Published