CVE-2025-15666 | Open Asset Import Library Assimp up to 5.4.3 Model File SceneCombiner.cpp Copy width/height heap-based overflow (Issue 6079)

A vulnerability labeled as problematic has been found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler. Such manipulation of the argument width/height leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2025-15666. An attack has to be approached locally. Furthermore, there is an exploit available.

This and similar defects are tracked and handled via issue #6128.