Most recent entries from all

ALSA-2025:20963 — Moderate: qt5-qt3d security update

Affected: AlmaLinux:9: qt5-qt3d, AlmaLinux:9: qt5-qt3d-devel, AlmaLinux:9: qt5-qt3d-examples

Qt 3D provides functionality for near-realtime simulation systems with support for 2D and 3D rendering in both Qt C++ and Qt Quick applications).

Security Fix(es):

* assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow (CVE-2025-11277)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

bdu:2025-15598

EUVD-2026-270229

fkie_cve-2025-11277

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.

GHSA-36wg-34jh-gmgv

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited.

OESA-2026-1079 — assimp security update

Affected: openEuler:24.03-LTS-SP2: assimp

Assimp is a library to load and process geometric scenes from various data formats. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems of any kind, but is not limited to this purpose. Security Fix(es):

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be exploited.(CVE-2025-11277)

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function Assimp::BaseImporter::ConvertToUTF8 of the file BaseImporter.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.(CVE-2025-2152)

A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as ab66a1674fcfac87aaba4c8b900b3…

openSUSE-SU-2026:10946-1 — assimp-devel-6.0.5-3.1 on GA media

assimp-devel-6.0.5-3.1 on GA media

PYSEC-2025-157

Affected: PyPI: pyassimp

RHSA-2025:22413 — Red Hat Security Advisory: qt5-qt3d security update

assimp: Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow

UBUNTU-CVE-2025-11277

Affected: Ubuntu:16.04:LTS: assimp, Ubuntu:18.04:LTS: assimp, Ubuntu:20.04:LTS: assimp, Ubuntu:22.04:LTS: assimp, Ubuntu:24.04:LTS: assimp, Ubuntu:25.10: assimp, Ubuntu:26.04:LTS: assimp

WID-SEC-W-2025-2508 — Red Hat Enterprise Linux: Schwachstelle ermöglicht Denial of Service

Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.