CVE-2025-70071

MediumCVSS 5.9

Published: 04/05/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

41th percentile - higher than 41% of all known CVEs

Summary

A denial of service vulnerability was found in Assimp v.6.0.2 in the ParseVectorDataArray() function within FBXParser.cpp. A remote attacker can exploit this by sending specially crafted data, causing the application to crash.

Risk Assessment

The risk involves a remote attacker causing service unavailability in applications using the Assimp library, potentially disrupting 3D model processing workflows.

Recommendation

Immediately update the Assimp library to the latest patched version. If updating is not possible, restrict access to FBX file processing functions.

Original NVD description (English source)

An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXParser.cpp, ParseVectorDataArray()