VulnSocial

CVE-2025-3548Patch(assimp / assimp)

LOWCVSS 3.3 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

assimp CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-119CWE-122

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • assimp

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Patch: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
assimp
Products
assimp

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-12: 1Technical Details · 2026-06-12: 106-12
Signal classification1 categories
Patch
1100.0%
Referenced assets1 URL
Full discourse1 post
  • ThreatCluster@threatcluster
    Patch

    openSUSE released security advisories for CVE-2026-0183 in RoundcubeMail and CVE-2025-3548 in Assimp, addressing XSS/SQL injection and denial-of-service flaws in SLE-15-SP6 and SP7 backports, Linuxsecurity reported. https://threatcluster.io/cluster/opensuse-security-updates-address-multiple-vulnerabilities-547f2b14

    Post summary

    OpenSUSE released advisories for CVE‑2026‑0183 (RoundcubeMail) and CVE‑2025‑3548 (Assimp), describing XSS/SQL injection and denial‑of‑service issues in backported packages.

    0000090
    330 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appassimpassimp---

Explore more

Back to dashboardassimp CVEsassimp vulnerabilities