CVE-2025-5200 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-5200 Interim 1 2 2026-03-05T01:31:26Z current 2025-05-27T23:15:38Z 2026-03-05T01:31:26Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-5200 A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings openSUSE Tumbleweed assimp-devel-6.0.4-1.1 libassimp6-6.0.4-1.1 assimp-devel-6.0.4-1.1 as a component of openSUSE Tumbleweed libassimp6-6.0.4-1.1 as a component of openSUSE Tumbleweed A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDLImporter::InternReadFile_Quake1 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. CVE-2025-5200 openSUSE Tumbleweed:assimp-devel-6.0.4-1.1 openSUSE Tumbleweed:libassimp6-6.0.4-1.1 low 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L