Medium [CVE-2025-15666] Heap-based buffer overflow via crafted model file

A security vulnerability has been detected in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function Assimp::SceneCombiner::Copy of the file code/Common/SceneCombiner.cpp of the component Model File Handler.

Such manipulation of the argument width/height leads to heap-based buffer overflow. An attack has to be approached locally.

The exploit has been disclosed publicly and may be used. This and similar defects are tracked and handled via issue #6128.

A local attacker could exploit a vulnerability where specially crafted model files could cause a heap-based buffer overflow. This issue, occurring in the `SceneCombiner::Copy` function, could allow an attacker to gain unauthorized access to sensitive information or cause the application to crash, leading to a denial of service.

Successful exploitation requires local access and user interaction. An attacker must supply a specially crafted model file and rely on a user or an application to actively process it using the Assimp library.

The impact of this vulnerability is localized specifically to the application parsing the malformed file. While it can lead to an application crash (Denial of Service) or localized information disclosure, it does not allow for privilege escalation, remote code execution, or a broader system-wide compromise.