CVE-2025-11277 | Open Asset Import Library Assimp 6.0.2 Q3DLoader.cpp InternReadFile heap-based overflow (Issue 6358)

A vulnerability described as critical has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing manipulation can lead to heap-based buffer overflow.

This vulnerability is registered as CVE-2025-11277. The attack needs to be launched locally. Furthermore, an exploit is available.