ID |
CVE-2025-3158
|
Sažetak |
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component LWO File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. |
Reference |
|
CVSS |
Base: | 4.3 |
Impact: | 6.4 |
Exploitability: | 3.1 |
|
Pristup |
Vektor | Složenost | Autentikacija |
LOCAL |
LOW |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
PARTIAL |
PARTIAL |
PARTIAL |
|
CVSS vektor |
AV:L/AC:L/Au:S/C:P/I:P/A:P |
Zadnje važnije ažuriranje |
07-04-2025 - 14:18 |
Objavljeno |
03-04-2025 - 14:15 |