GCVE - cpe:2.3:a:assimp:assimp:6.0.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:assimp:assimp:6.0.2:*:*:*:*:*:*:*

part: a version: 6.0.2 update: *

Vendor	Assimp (`0b9877dc-4cc4-5e37-8a44-cf5f32827754`)
Product	Assimp (`96775b28-80a7-5a95-b127-a74b3054c926`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/assimp`	purl2cpe	2026-06-01 10:17:10.810700
`pkg:deb/ubuntu/assimp`	purl2cpe	2026-06-01 10:17:10.810701
`pkg:github/assimp/assimp`	purl2cpe	2026-06-01 10:17:10.810703
`pkg:gitlab/ubports/assimp`	purl2cpe	2026-06-01 10:17:10.810704
`pkg:nuget/Assimp`	purl2cpe	2026-06-01 10:17:10.810705
`pkg:rpm/fedora/assimp`	purl2cpe	2026-06-01 10:17:10.810707
`pkg:rpm/opensuse/assimp`	purl2cpe	2026-06-01 10:17:10.810708
`pkg:sourceforge/assimp`	purl2cpe	2026-06-01 10:17:10.810709

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-11277`	vulnerable	2026-06-08 07:02:28.531126	Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow MEDIUM (5.3) A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Published: 2025-10-05T01:32:07.068Z Updated: 2026-02-24T06:40:34.974Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327011 https://vuldb.com/?ctiid.327011 https://vuldb.com/?submit.658912 https://github.com/assimp/assimp/issues/6358 https://github.com/user-attachments/files/22422643/poc.zip	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11275`	vulnerable	2026-06-08 07:02:28.529124	Open Asset Import Library Assimp OpenDDLParserUtils.h getNextSeparator heap-based overflow MEDIUM (5.3) A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. Published: 2025-10-05T00:32:06.470Z Updated: 2026-02-24T06:40:21.680Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327009 https://vuldb.com/?ctiid.327009 https://vuldb.com/?submit.658675 https://github.com/assimp/assimp/issues/6357 https://github.com/user-attachments/files/22417682/poc.zip	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-11274`	vulnerable	2026-06-08 07:02:28.528574	Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile allocation of resources LOW (3.3) A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. Published: 2025-10-05T00:02:07.007Z Updated: 2026-02-24T06:40:05.515Z Open on db.gcve.eu Reference links https://vuldb.com/?id.327008 https://vuldb.com/?ctiid.327008 https://vuldb.com/?submit.658075 https://github.com/assimp/assimp/issues/6356 https://github.com/user-attachments/files/22407575/poc.zip	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.