Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Mon, 04 May 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Heap Buffer Overflow in Assimp FBX Importer aiMaterial::AddBinaryProperty | |
| Weaknesses | CWE-122 CWE-20 |
Mon, 04 May 2026 15:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Assimp
Assimp assimp |
|
| Vendors & Products |
Assimp
Assimp assimp |
Mon, 04 May 2026 14:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Buffer Overflow vulnerability exists in Assimp versions up to 6.0.2 in the FBX Importer. The vulnerability occurs in aiMaterial::AddBinaryProperty, where a property key string from a crafted FBX file is copied into a fixed-size heap buffer using strcpy() without runtime length validation | |
| References |
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-05-04T14:06:39.952Z
Reserved: 2026-01-09T00:00:00.000Z
Link: CVE-2025-70067
No data.
Status : Received
Published: 2026-05-04T14:16:29.350
Modified: 2026-05-04T14:16:29.350
Link: CVE-2025-70067
No data.
OpenCVE Enrichment
Updated: 2026-05-04T16:30:03Z