Alerts This Week
Warning Icon 1 815
Alerts This Week
Warning Icon 1 815

Mageia Assimp Critical Buffer Overflow Exploit Risks 2026-0170

mageia
Calendar Grey June 2, 2026
Dist Mageia Esm H88
Critical security advisory for Mageia 9 addressing multiple flaws in Assimp. Urgent updates recommended.
Security update

Summary

Description: CVE-2025-2750,- A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. CVE-2025-2757, A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. CVE-2025-2757, A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affect...

References

- https://bugs.mageia.org/show_bug.cgi?id=34439

- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYGDCFEL3GZ5PDUZFKEVVISQWAENNBTB/

- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/2LQLM3OX7KPUJNJSKSVDROFQGZRJPVRF/

- https://www.cve.org/CVERecord?id=CVE-2025-2750

- https://www.cve.org/CVERecord?id=CVE-2025-2751

- https://www.cve.org/CVERecord?id=CVE-2025-2757

- https://www.cve.org/CVERecord?id=CVE-2025-3158

- https://www.cve.org/CVERecord?id=CVE-2025-3548

- https://www.cve.org/CVERecord?id=CVE-2025-11277

- https://www.cve.org/CVERecord?id=CVE-2025-70067

Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit critical Mageia assimp

Resolution

SRPMS

- 9/core/assimp-5.2.5-1.mga9

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 02 Jun 2026
URL: https://advisories.mageia.org/MGASA-2026-0170.html
Type: security
CVE: CVE-2025-2750, CVE-2025-2751, CVE-2025-2757, CVE-2025-3158, CVE-2025-3548, CVE-2025-11277, CVE-2025-70067

Topics%20covered

Topics Covered

security advisory buffer overflow remote exploit critical Mageia assimp

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here