What’s Vulnerable › Vulnerabilities

CVE-2025-11275: Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-10-05 · updated 2026-10-11
• Weakness: CWE-119

Description

A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used.

Affected products

• Open Asset Import Library Assimp: 6.0.2

References

• https://github.com/assimp/assimp/issues/6357
• https://github.com/user-attachments/files/22417682/poc.zip
• https://vuldb.com/?ctiid.327009
• https://vuldb.com/?id.327009
• https://vuldb.com/?submit.658675

Get alerted when CVE-2025-11275 or the next vulnerability affects your stack