CVE-2025-11277 Open Asset Import Library Assimp Q3DLoader.cpp InternReadFile heap-based overflow
A heap-based buffer overflow in Assimp's Q3D loader allows local attackers to execute arbitrary code or cause denial of service via crafted files.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-11277?
CVE-2025-11277 is a medium-severity memory corruption vulnerability in Open Asset Import Library Assimp, published on 5 Oct 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks.
Which versions are affected by CVE-2025-11277?
1 open source package ship an affected version, including pyassimp. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
pyassimp PyPI | All versions to 6.0.2 | None |
Linux distribution packages (39)
qt6-qtquick3d AlmaLinux:10 | All versions | 6.9.1-1.el10_1.1 |
qt6-qtquick3d-devel AlmaLinux:10 | All versions | 6.9.1-1.el10_1.1 |
qt6-qtquick3d-examples AlmaLinux:10 | All versions | 6.9.1-1.el10_1.1 |
qt5-qt3d AlmaLinux:9 | All versions | 5.15.9-2.el9_7.1 |
qt5-qt3d-devel AlmaLinux:9 | All versions | 5.15.9-2.el9_7.1 |
qt5-qt3d-examples AlmaLinux:9 | All versions | 5.15.9-2.el9_7.1 |
qt6-qtquick3d Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-debugsource Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-devel Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-devel-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-examples Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-examples-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt6-qtquick3d-tests-debuginfo Red Hat:enterprise_linux:10.1 | All versions | 0:6.9.1-1.el10_1.1 |
qt5-qt3d Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-debugsource Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-devel Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-devel Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-devel-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-devel-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-examples Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-examples Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-examples-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-examples-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt5-qt3d-tests-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_6.1 |
qt5-qt3d-tests-debuginfo Red Hat:enterprise_linux:9::appstream | All versions | 0:5.15.9-2.el9_7.1 |
qt6-qtquick3d Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-debugsource Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-devel Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-devel-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-examples Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-examples-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt6-qtquick3d-tests-debuginfo Red Hat:enterprise_linux_eus:10.0 | All versions | 0:6.8.1-2.el10_0.1 |
qt5-qt3d Red Hat:rhel_e4s:9.0::appstream | All versions | 0:5.15.2-10.el9_0.1 |
Products include Assimp Assimp.
How do I fix CVE-2025-11277?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2025-11277 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-11277 exists.
Other vulnerabilities in Open Asset Import Library Assimp
Sources
Also known as ALSA-2025:20963, ALSA-2025:22361, CLSA-2025-1764083719, CLSA-2025-1766598916, DEBIAN-CVE-2025-11277, GHSA-36wg-34jh-gmgv and 12 more.