Read the docs
TI-2025-02759 Aliases CVE-2025-3159GHSA-8qp4-7g6w-2wp3

Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

Priority MEDIUM 55CWE-119Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
Low · Low · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and Red Hat.

Summary

A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. The identifier of the patch is e8a6286542924e628e02749c4f5ac4f91fdae71b. It is recommended to apply a patch to fix this issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00335 26th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD and the CNA
Fix Fixed Red Hat: 4 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Open Asset Import LibraryAssimp5.4.3—No fix listedCNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:assimp:assimp:5.4.3:*:*:*:*:*:*:*5.4.3VulnerableOpen Asset Import Library

Remediation

Red Hat 4 advisories

  • RHSA-2025:15463 Released 2025-09-08 · Red Hat rating Moderate
    qt5-qt3d security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.0) qt5-qt3d-5.15.2-10.el9_0, qt5-qt3d-devel-5.15.2-10.el9_0, qt5-qt3d-examples-5.15.2-10.el9_0
  • RHSA-2025:15407 Released 2025-09-08 · Red Hat rating Moderate
    qt5-qt3d security update
    • Red Hat Enterprise Linux AppStream EUS (v.9.4) qt5-qt3d-5.15.9-2.el9_4, qt5-qt3d-devel-5.15.9-2.el9_4, qt5-qt3d-examples-5.15.9-2.el9_4
  • RHSA-2025:15347 Released 2025-09-04 · Red Hat rating Moderate
    qt5-qt3d security update
    • Red Hat Enterprise Linux AppStream E4S (v.9.2) qt5-qt3d-5.15.3-2.el9_2, qt5-qt3d-devel-5.15.3-2.el9_2, qt5-qt3d-examples-5.15.3-2.el9_2
Show 1 more Red Hat advisories
  • RHSA-2025:12842 Released 2025-08-05 · Red Hat rating Moderate
    qt5-qt3d security update
    • Red Hat Enterprise Linux AppStream (v. 9) qt5-qt3d-5.15.9-2.el9_6, qt5-qt3d-devel-5.15.9-2.el9_6, qt5-qt3d-examples-5.15.9-2.el9_6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Enterprise Linux AppStream (v. 9)Fixed RHSA-2025:12842
Red Hat Enterprise Linux AppStream E4S (v.9.0)Fixed RHSA-2025:15463
Red Hat Enterprise Linux AppStream E4S (v.9.2)Fixed RHSA-2025:15347
Red Hat Enterprise Linux AppStream EUS (v.9.4)Fixed RHSA-2025:15407

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-3159
  2. 2026-10-03 Alias added: GHSA-8qp4-7g6w-2wp3

References

Exploit 2

Patch 2

  • TI-2022-22579 An issue was discovered with assimp 5.1.4, a use after free occurred in function… CVSS 3.1HIGH 8.8
  • TI-2024-32382 An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the… CVSS 3.1HIGH 8.4
  • TI-2024-35797 A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function… CVSS 3.1MEDIUM 6.2
  • TI-2024-32385 A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in… CVSS 3.1MEDIUM 6.2
  • TI-2024-32384 A segmentation fault (SEGV) was detected in the… CVSS 3.1MEDIUM 5.5
  • TI-2024-32383 A heap-buffer-overflow vulnerability has been identified in the… CVSS 3.1MEDIUM 5.5
See all 46 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences