# pyassimp (PyPI) vulnerabilities 33 known vulnerabilities (1 high, 32 medium), with the versions each affects and the releases that fix them. ## At a glance - Latest release: not known (cve.now hasn't read this package's releases) - Newest unaffected release: not known without release data - Registry: https://pypi.org/project/pyassimp/ ## Advisories (33) ### [CVE-2025-11277](https://cve.now/CVE-2025-11277): Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow - Severity: Medium 4.8 - Published: Oct 5, 2025 - Affected: through 6.0.2. ### [CVE-2025-11275](https://cve.now/CVE-2025-11275): Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow - Severity: Medium 4.8 - Published: Oct 5, 2025 - Affected: through 6.0.2. ### [CVE-2025-11274](https://cve.now/CVE-2025-11274): Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources - Severity: Medium 4.8 - Published: Oct 5, 2025 - Affected: through 6.0.2. ### [CVE-2025-5169](https://cve.now/CVE-2025-5169): Open Asset Import Library Assimp MDLLoader.cpp InternReadFile\_3DGS\_MDL345 out-of-bounds - Severity: Medium 4.8 - Published: May 26, 2025 - Affected: through 5.4.3. ### [CVE-2025-5168](https://cve.now/CVE-2025-5168): Open Asset Import Library Assimp MDLLoader.cpp ImportUVCoordinate\_3DGS\_MDL345 out-of-bounds - Severity: Medium 4.8 - Published: May 26, 2025 - Affected: through 5.4.3. ### [CVE-2025-5167](https://cve.now/CVE-2025-5167): Open Asset Import Library Assimp LWOLoader.h GetS0 out-of-bounds - Severity: Medium 4.8 - Published: May 26, 2025 - Affected: through 5.4.3. ### [CVE-2025-5166](https://cve.now/CVE-2025-5166): Open Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds - Severity: Medium 4.8 - Published: May 26, 2025 - Affected: through 5.4.3. ### [CVE-2025-5165](https://cve.now/CVE-2025-5165): Open Asset Import Library Assimp MDCLoader.cpp ValidateSurfaceHeader out-of-bounds - Severity: Medium 4.8 - Published: May 26, 2025 - Affected: through 5.4.3. ### [CVE-2025-3549](https://cve.now/CVE-2025-3549): Open Asset Import Library Assimp File MD3Loader.cpp ValidateSurfaceHeaderOffsets heap-based overflow - Severity: Medium 4.8 - Published: Apr 14, 2025 - Affected: through 5.4.3. ### [CVE-2025-3196](https://cve.now/CVE-2025-3196): Open Asset Import Library Assimp Malformed File MD2Loader.cpp InternReadFile stack-based overflow - Severity: Medium 4.8 - Published: Apr 4, 2025 - Affected: through 5.4.3. ### [CVE-2025-3160](https://cve.now/CVE-2025-3160): Open Asset Import Library Assimp File SceneCombiner.cpp AddNodeHashes out-of-bounds - Severity: Medium 4.8 - Published: Apr 3, 2025 - Affected: through 5.4.3. ### [CVE-2025-3159](https://cve.now/CVE-2025-3159): Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow - Severity: Medium 4.8 - Published: Apr 3, 2025 - Affected: through 5.4.3. ### [CVE-2025-3158](https://cve.now/CVE-2025-3158): Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow - Severity: Medium 4.8 - Published: Apr 3, 2025 - Affected: through 5.4.3. ### [CVE-2025-3016](https://cve.now/CVE-2025-3016): Open Asset Import Library Assimp MDL File MDLMaterialLoader.cpp ParseTextureColorData resource consumption - Severity: Medium 5.3 - Published: Mar 31, 2025 - Affected: through 5.4.3. ### [CVE-2025-3015](https://cve.now/CVE-2025-3015): Open Asset Import Library Assimp ASE File ASELoader.cpp BuildUniqueRepresentation out-of-bounds - Severity: Medium 5.3 - Published: Mar 31, 2025 - Affected: through 5.4.3. ### [CVE-2025-2757](https://cve.now/CVE-2025-2757): Open Asset Import Library Assimp MD5 File MD5Parser.cpp AI\_MD5\_PARSE\_STRING\_IN\_QUOTATION heap-based overflow - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2756](https://cve.now/CVE-2025-2756): Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2755](https://cve.now/CVE-2025-2755): Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection out-of-bounds - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2754](https://cve.now/CVE-2025-2754): Open Asset Import Library Assimp AC3D File ACLoader.cpp ConvertObjectSection heap-based overflow - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2753](https://cve.now/CVE-2025-2753): Open Asset Import Library Assimp LWS File LWSLoader.cpp MergeScenes out-of-bounds - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2752](https://cve.now/CVE-2025-2752): Open Asset Import Library Assimp CSM File fast\_atof.h fast\_atoreal\_move out-of-bounds - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2751](https://cve.now/CVE-2025-2751): Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2750](https://cve.now/CVE-2025-2750): Open Asset Import Library Assimp CSM File CSMLoader.cpp InternReadFile out-of-bounds write - Severity: Medium 5.3 - Published: Mar 25, 2025 - Affected: through 5.4.3. ### [CVE-2025-2592](https://cve.now/CVE-2025-2592): Open Asset Import Library Assimp CSMLoader.cpp InternReadFile heap-based overflow - Severity: Medium 5.3 - Published: Mar 21, 2025 - Affected: through 5.4.3. ### [CVE-2025-2591](https://cve.now/CVE-2025-2591): Open Asset Import Library Assimp MDLLoader.cpp InternReadFile\_Quake1 divide by zero - Severity: Medium 5.3 - Published: Mar 21, 2025 - Affected: through 5.4.3. ### [CVE-2025-2152](https://cve.now/CVE-2025-2152): Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow - Severity: Medium 5.3 - Published: Mar 10, 2025 - Affected: through 5.4.3. ### [CVE-2025-2151](https://cve.now/CVE-2025-2151): Open Asset Import Library Assimp File ParsingUtils.h GetNextLine stack-based overflow - Severity: Medium 5.3 - Published: Mar 10, 2025 - Affected: through 5.4.3. ### [CVE-2024-53425](https://cve.now/CVE-2024-53425): A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. - Severity: Medium 6.2 - Published: Nov 21, 2024 - Affected: through 5.4.3. ### [CVE-2024-48426](https://cve.now/CVE-2024-48426): A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with… - Severity: Medium 6.2 - Published: Oct 24, 2024 - Affected: through 5.4.3. ### [CVE-2024-48425](https://cve.now/CVE-2024-48425): A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess\_Triangle::UpdateNode function within the Assimp library… - Severity: Medium 5.5 - Published: Oct 24, 2024 - Affected: through 5.4.3. ### [CVE-2024-48424](https://cve.now/CVE-2024-48424): A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library… - Severity: Medium 5.5 - Published: Oct 24, 2024 - Affected: through 5.4.3. ### [CVE-2024-48423](https://cve.now/CVE-2024-48423): An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp… - Severity: High 8.4 - Published: Oct 24, 2024 - Affected: all versions. ### [CVE-2024-46632](https://cve.now/CVE-2024-46632): Assimp v5.4.3 is vulnerable to Buffer Overflow via the MD5Importer::LoadMD5MeshFile function. - Severity: Medium 4.3 - Published: Sep 26, 2024 - Affected: through 5.4.3. --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/packages/pypi/pyassimp Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.