CVE-2025-3016 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-3016 Interim 1 4 2025-04-22T23:16:34Z current 2025-04-01T23:13:08Z 2025-04-22T23:16:34Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-3016 A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument mWidth/mHeight leads to resource consumption. The attack can be initiated remotely. Upgrading to version 6.0 is able to address this issue. The name of the patch is 5d2a7482312db2e866439a8c05a07ce1e718bed1. It is recommended to apply a patch to fix this issue. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/GUXUVZ7SBZK5ZFR45B223UXCWUMD4XQD/ E-Mail link for openSUSE-SU-2025:0113-1 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/IVB5I4E2WYMZHY5UCOCLR75CX3WJV47A/ E-Mail link for openSUSE-SU-2025:14950-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP6 openSUSE Leap 15.6 openSUSE Tumbleweed assimp-devel-5.3.1-bp156.3.9.1 assimp-devel-5.4.3-5.1 libassimp5-5.3.1-bp156.3.9.1 libassimp5-5.4.3-5.1 assimp-devel-5.3.1-bp156.3.9.1 as a component of SUSE Package Hub 15 SP6 libassimp5-5.3.1-bp156.3.9.1 as a component of SUSE Package Hub 15 SP6 assimp-devel-5.3.1-bp156.3.9.1 as a component of openSUSE Leap 15.6 libassimp5-5.3.1-bp156.3.9.1 as a component of openSUSE Leap 15.6 assimp-devel-5.4.3-5.1 as a component of openSUSE Tumbleweed libassimp5-5.4.3-5.1 as a component of openSUSE Tumbleweed A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the component MDL File Handler. The manipulation of the argument mWidth/mHeight leads to resource consumption. The attack can be initiated remotely. Upgrading to version 6.0 is able to address this issue. The name of the patch is 5d2a7482312db2e866439a8c05a07ce1e718bed1. It is recommended to apply a patch to fix this issue. CVE-2025-3016 SUSE Package Hub 15 SP6:assimp-devel-5.3.1-bp156.3.9.1 SUSE Package Hub 15 SP6:libassimp5-5.3.1-bp156.3.9.1 openSUSE Leap 15.6:assimp-devel-5.3.1-bp156.3.9.1 openSUSE Leap 15.6:libassimp5-5.3.1-bp156.3.9.1 openSUSE Tumbleweed:assimp-devel-5.4.3-5.1 openSUSE Tumbleweed:libassimp5-5.4.3-5.1 moderate 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H