CVE-2025-5168 | Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 iIndex out-of-bounds (Issue 6170)

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bounds read.

This vulnerability is handled as CVE-2025-5168. An attack has to be approached locally. Furthermore, there is an exploit available.

The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.