CVE-2024-53425: Assimp

Medium severity, CVSS 6.2. EPSS: 0.3% chance of exploitation in the next 30 days.

A heap-buffer-overflow vulnerability was discovered in the SkipSpacesAndLineEnd function in Assimp v5.4.3. This issue occurs when processing certain malformed MD5 model files, leading to an out-of-bounds read and potential application crash.

Affected products

• Assimp Assimp: version 5.4.3 only

Published 2024-11-21. Last modified 2026-06-17.