Skip to content
OpenAdvisories
Medium WID-SEC-2025-1977 2 CVEs

Red Hat Enterprise Linux (assimp): Mehrere Schwachstellen ermöglichen Denial of Service

Published Sep 4, 2025 · Updated Sep 7, 2025 · Revision 2 · de-DE

Vendor: Red Hat Product: Enterprise Linux Platform: Linux

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen oder andere nicht näher spezifizierte Auswirkungen zu erreichen.

Product

Red Hat Enterprise Linux (RHEL) ist eine populäre Linux-Distribution.

Vulnerabilities 2

  • Medium 5.3
    CVE-2025-3158

    Open Asset Import Library Assimp LWO File LWOAnimation.cpp UpdateAnimRangeSetup heap-based overflow

    A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. Affected by this issue is the function Assimp::LWO::AnimResolver::UpdateAnimRangeSetup of the file code/AssetLib/LWO/LWOAnimation.cpp of the component…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu PyPI
  • Medium 5.3
    CVE-2025-3159

    Open Asset Import Library Assimp ASE File ASEParser.cpp ParseLV4MeshBonesVertices heap-based overflow

    A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component ASE File Handler. The…

    Open Asset Import Library Assimp assimp assimp Debian Ubuntu PyPI

Revision history

  1. #2

    Neue Updates von Red Hat aufgenommen

  2. #1

    Initiale Fassung

References