CVE-2025-6120 | Open Asset Import Library Assimp up to 5.4.3 HL1MDLLoader.cpp read_meshes heap-based overflow (Issue 6220)

A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function read_meshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow.

This vulnerability is known as CVE-2025-6120. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.