VulnSocial

CVE-2025-11277Patch(assimp / assimp)

LOWCVSS 7.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch assimp assimp systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.

assimp CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-119CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • assimp

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
assimp
Products
assimp

1 version affected across 1 product

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-01-28: 1Patch / Workaround · 2026-01-28: 101-28
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Ferramentas Linux@Cezar_H_Linux
    Patch

    🧵 #Fedora's urgent patch for CVE-2025-11277 in the assimp 3D library is a critical case study in supply chain security. This vulnerability affected a core dependency used in game dev, CAD, and simulation tools. Read more: 👉 https://tinyurl.com/2vyxedmk #Security https://t.co/mvj8IUOuQh

    Post summary

    Fedora has released an urgent patch for CVE‑2025‑11277 in the assimp 3D library, underscoring a critical supply chain flaw that impacts game development, CAD, and simulation tools.

    0000052
    1.3K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appassimpassimp6.0.2--

Explore more

Back to dashboardassimp CVEsassimp vulnerabilities