Skip to content
OpenAdvisories
Medium RHSA-2025:15463 2 CVEs

Red Hat Security Advisory: qt5-qt3d security update

Published Sep 9, 2025 · Updated Jul 12, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-debuginfo 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-debugsource 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-devel 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-devel-debuginfo 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-examples 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-examples-debuginfo 0:5.15.2-10.el9_0
Red Hat · RHEL 9.0 E4S rhel_e4s:9.0::appstream qt5-qt3d-tests-debuginfo 0:5.15.2-10.el9_0

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-3158

    Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow

    A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2025-3159

    Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

    A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2357196
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2357216
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_15463.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-3158
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-3158
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-3158
  • article
    https://github.com/assimp/assimp/issues/6023
  • article
    https://github.com/assimp/assimp/issues/6023#issue-2877381000
  • article
    https://vuldb.com/?ctiid.303104
  • article
    https://vuldb.com/?id.303104
  • article
    https://vuldb.com/?submit.542246
  • report
    https://access.redhat.com/security/cve/CVE-2025-3159
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-3159
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-3159
  • article
    https://github.com/assimp/assimp/issues/6024
  • article
    https://github.com/assimp/assimp/issues/6024#issue-2877382033
  • article
    https://github.com/assimp/assimp/pull/6051
  • article
    https://github.com/tellypresence/assimp/commit/e8a6286542924e628e02749c4f5ac4f91fdae71b
  • article
    https://vuldb.com/?ctiid.303105
  • article
    https://vuldb.com/?id.303105
  • article
    https://vuldb.com/?submit.542247