CVE-2025-70067
Critical · 9.8CVSS
9.8
EPSS
0.3%
Published
May 4, 2026
CISA due date
—
The record
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | assimp | 0 | 6.0.5-2.1 |
Related vulnerabilities
- CVE-2026-10232 A weakness has been identified in Assimp up to 6.0.4. Also affects assimp
- CVE-2026-10199 A vulnerability has been found in Assimp up to 6.0.4. Also affects assimp
- CVE-2026-10200 A vulnerability was found in Assimp up to 6.0.4. Also affects assimp
- CVE-2026-10197 A vulnerability was detected in Assimp up to 6.0.4. Also affects assimp
- CVE-2024-53425 A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function… Also affects assimp
- CVE-2024-48424 A heap-buffer-overflow vulnerability has been identified in the… Also affects assimp
- CVE-2024-48425 A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle… Also affects assimp
- CVE-2024-48426 A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in… Also affects assimp