critical9.8
CVE-2025-70067
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer.
Impact
Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation
Affected products
| Product | Affected versions |
|---|---|
| Assimp | before 6.0.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.