Heap Overflow in Assimp 3D Model Parser

Publication date: 2026-05-04

Last updated on: 2026-07-05

Assigner: MITRE

Description

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXMeshGeometry.cpp, MeshGeometry::MeshGeometry()

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-05-04

Last Modified

2026-07-05

Generated

2026-07-06

AI Q&A

2026-05-05

EPSS Evaluated

2026-07-05

NVD

CVE-2025-70070

Affected Vendors & Products

Vendor	Product	Version / Range
assimp	assimp	6.0.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability exists in Assimp version 6.0.2 and allows a remote attacker to cause a denial of service (DoS) by exploiting the MeshGeometry::MeshGeometry() function in the FBXMeshGeometry.cpp file.

Impact Analysis

The impact of this vulnerability is a denial of service condition, which means an attacker can remotely cause the affected application to crash or become unavailable.

Hi! I’m here to help you understand CVE-2025-70070. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70