CVE-2025-5169 | Open Asset Import Library Assimp 5.4.3 MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds (Issue 6171)

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile_3DGS_MDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2025-5169. Local access is required to approach this attack. Furthermore, there is an exploit available.

The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.