In short
- CVE-2025-11277 is a HIGH (CVSS 7.8) vulnerability affecting pyassimp, assimp (assimp).
- Chance of exploitation in the next 30 days (EPSS): 0.25%, higher than 16.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
| Package | Affected versions | Patched versions |
|---|
| pyassimp PyPI | ≤ 6.0.2
| No fix yet |
| assimp | = 6.0.2
| No fix yet |
Description
A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.
NVD description
A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free