Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5145 State: PUBLISHED Published: 2025-05-25T05:31:04.552Z Last Updated: 2025-07-11T08:41:34.484Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Netcore Products: NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2, POWER13 Problem Types: CWE-77, CWE-74 Description: A vulnerability, which was classified as critical, was found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 and POWER13 up to 20250508. This affects an unknown part of the file /www/cgi-bin/ of the component Query String Handler. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been dis
r. The manipulation leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310233 - https://vuldb.com/?ctiid.310233 - https://vuldb.com/?submit.573492 - https://github.com/Exploo0Osion/netcore_unauth - https://anonymous.4open.science/r/netcore_unauth-7D2E
CVE ID: CVE-2025-5146 State: PUBLISHED Published: 2025-05-25T07:00:09.594Z Last Updated: 2025-05-29T07:00:40.229Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netcore Products: NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2, NBR200V2 Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in Netcore NBR1005GPEV2, B6V2, COVER5, NAP830, NAP930, NBR100V2 and NBR200V2 up to 20250508 and classified as critical. This vulnerability affects the function passwd_set of the file /usr/bin/routerd of the component HTTP Header Handler. The manipulation of the argument pwd leads to command injection. The attack can be initiated remotely. The exploit has been disclose
tion of the argument pwd leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310234 - https://vuldb.com/?ctiid.310234 - https://vuldb.com/?submit.573493 - https://github.com/Exploo0Osion/netcore_command_injection_2
CVE ID: CVE-2025-5147 State: PUBLISHED Published: 2025-05-25T11:31:04.116Z Last Updated: 2025-05-29T07:00:52.075Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Netcore Products: NBR1005GPEV2, NBR200V2, B6V2 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Netcore NBR1005GPEV2, NBR200V2 and B6V2 up to 20250508 and classified as critical. This issue affects the function tools_ping of the file /usr/bin/network_tools. The manipulation of the argument url leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310235 - https://vuldb.com/?ctiid.310235 - https://vuldb.com/?submit.573682 - https://github.com/Exploo0Osion/netcore_command_injection_3
CVE ID: CVE-2025-5148 State: PUBLISHED Published: 2025-05-25T12:00:10.198Z Last Updated: 2025-05-28T17:38:41.538Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: FunAudioLLM Products: InspireMusic Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function load_state_dict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no v
ck has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 784cbf8dde2cf1456ff808aeba23177e1810e7a9. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310236 - https://vuldb.com/?ctiid.310236 - https://vuldb.com/?submit.573800 - https://github.com/FunAudioLLM/InspireMusic/issues/53 - https://github.com/FunAudioLLM/InspireMusic/issues/53#issuecomment-2866688220 - https://github.com/FunAudioLLM/InspireMusic/commit/784cbf8dde2cf1456ff808aeba23177e1810e7a9
CVE ID: CVE-2025-5149 State: PUBLISHED Published: 2025-05-25T13:00:14.995Z Last Updated: 2025-05-28T17:38:36.040Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: WCMS Problem Types: CWE-287 Description: A vulnerability was found in WCMS up to 8.3.11. It has been declared as critical. Affected by this vulnerability is the function getMemberByUid of the file /index.php?articleadmin/getallcon of the component Login. The manipulation of the argument uid leads to improper authentication. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the pub
plexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310237 - https://vuldb.com/?ctiid.310237 - https://vuldb.com/?submit.574590 - https://gitee.com/nwtmd5/cve/issues/IC6O7D
CVE ID: CVE-2025-5150 State: PUBLISHED Published: 2025-05-25T15:00:07.698Z Last Updated: 2025-05-28T17:38:30.293Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: docarray Problem Types: CWE-1321, CWE-94 Description: A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function __getitem__ of the file /docarray/data/torch_dataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes ('prototype pollution'). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about
e launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310238 - https://vuldb.com/?ctiid.310238 - https://vuldb.com/?submit.574696 - https://gist.github.com/superboy-zjc/56502343bcb12eb653081b426debf2c8
CVE ID: CVE-2025-5151 State: PUBLISHED Published: 2025-05-25T16:31:05.540Z Last Updated: 2025-05-28T17:38:24.723Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: defog-ai Products: introspect Problem Types: CWE-94, CWE-74 Description: A vulnerability classified as critical has been found in defog-ai introspect up to 0.1.4. This affects the function execute_analysis_code_safely of the file introspect/backend/tools/analysis_tools.py. The manipulation of the argument code leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The patch is named 502. It is recommended to apply
l host. The exploit has been disclosed to the public and may be used. The patch is named 502. It is recommended to apply a patch to fix this issue. The code maintainer explains, that "[they] have added some workarounds to address this in #502, but will not be implementing a full fix. This is because this repo is meant to be run in a docker environment, which will significantly mitigate potential security risks. Having said that, we have added a SECURITY section in our README to make this clearer to users." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310239 - https://vuldb.com/?ctiid.310239 - https://vuldb.com/?submit.574809 - https://github.com/defo
ps://vuldb.com/?id.310239 - https://vuldb.com/?ctiid.310239 - https://vuldb.com/?submit.574809 - https://github.com/defog-ai/introspect/issues/495 - https://github.com/defog-ai/introspect/issues/495#issuecomment-2894640278 - https://github.com/defog-ai/introspect/issues/495#issue-3036141048 - https://github.com/defog-ai/introspect/pull/502
CVE ID: CVE-2025-5152 State: PUBLISHED Published: 2025-05-25T17:00:08.649Z Last Updated: 2025-05-28T17:38:19.361Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Chanjet Products: CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in Chanjet CRM up to 20250510. This vulnerability affects unknown code of the file /activity/newActivityedit.php?DontCheckLogin=1&id=null&ret=mod1. The manipulation of the argument gblOrgID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional A
ublic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310240 - https://vuldb.com/?ctiid.310240 - https://vuldb.com/?submit.575047 - https://github.com/ClausiusFan/CVE/blob/main/CVE_1.md
CVE ID: CVE-2025-5153 State: PUBLISHED Published: 2025-05-25T17:31:04.686Z Last Updated: 2025-05-28T17:38:13.634Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: CMS Made Simple Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21. This issue affects some unknown processing of the component Design Manager Module. The manipulation of the argument Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Ana
lic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310241 - https://vuldb.com/?ctiid.310241 - https://vuldb.com/?submit.575470 - https://github.com/feixuezhi/CMSMadeSimple2
CVE ID: CVE-2025-5154 State: PUBLISHED Published: 2025-05-25T18:31:04.840Z Last Updated: 2025-05-28T17:38:08.525Z Severity: LOW (CVSS 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: PhonePe App Problem Types: CWE-313, CWE-312 Description: A vulnerability, which was classified as problematic, was found in PhonePe App 25.03.21.0 on Android. Affected is an unknown function of the file /data/data/com.phonepe.app/databases/ of the component SQLite Database. The manipulation leads to cleartext storage in a file or on disk. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
oach this attack. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310242 - https://vuldb.com/?ctiid.310242 - https://vuldb.com/?submit.576245 - https://github.com/honestcorrupt/-Insecure-Local-Storage-of-Sensitive-User-Data-in-PhonePe-Android-App-Unpatched- - https://drive.google.com/drive/folders/1Xj9y2w3E98IZu8PUeGGI0nQPNsvVm87I?usp=sharing
CVE ID: CVE-2025-5155 State: PUBLISHED Published: 2025-05-25T19:31:04.323Z Last Updated: 2025-05-27T14:14:40.875Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: qianfox Products: FoxCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in qianfox FoxCMS 1.2.5 and classified as critical. Affected by this vulnerability is the function batchCope of the file app/admin/controller/Article.php. The manipulation of the argument ids leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310243 - https://vuldb.com/?ctiid.310243 - https://vuldb.com/?submit.576286 - https://github.com/xiaoyangsec/foxcms_sql_injection/blob/main/foxcms_sql_injection.md
CVE ID: CVE-2025-5156 State: PUBLISHED Published: 2025-05-25T22:00:08.568Z Last Updated: 2025-05-28T17:38:00.978Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: H3C Products: GR-5400AX Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in H3C GR-5400AX up to 100R008 and classified as critical. Affected by this issue is the function EditWlanMacList of the file /routing/goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
d. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310244 - https://vuldb.com/?ctiid.310244 - https://vuldb.com/?submit.574080 - https://github.com/CH13hh/tmp_store_cc/blob/main/H3C%20GB5400AX/6.md
CVE ID: CVE-2025-5157 State: PUBLISHED Published: 2025-05-25T22:31:05.802Z Last Updated: 2025-05-28T17:37:55.412Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-22 Description: A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been classified as critical. This affects the function fileContent of the file /cfgFile/fileContent. The manipulation of the argument filePath leads to path traversal. It is possible to initiate the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: R
ntacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310245 - https://vuldb.com/?ctiid.310245 - https://vuldb.com/?submit.576229 - https://flowus.cn/share/f78256ea-f210-4b35-ba71-85aba82d3e0a?code=G8A6P3
CVE ID: CVE-2025-5158 State: PUBLISHED Published: 2025-05-25T23:00:12.511Z Last Updated: 2025-05-28T17:37:50.276Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-22 Description: A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been declared as problematic. This vulnerability affects the function downloadSoftware of the file /cfgFile/downloadSoftware. The manipulation of the argument filename leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did
e exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310246 - https://vuldb.com/?ctiid.310246 - https://vuldb.com/?submit.576230 - https://flowus.cn/share/a17e9654-f054-49d9-a3c1-3e37dc6c91cc?code=G8A6P3
CVE ID: CVE-2025-5159 State: PUBLISHED Published: 2025-05-25T23:31:06.891Z Last Updated: 2025-05-28T17:37:44.590Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-22 Description: A vulnerability was found in H3C SecCenter SMP-E1114P02 up to 20250513. It has been rated as problematic. This issue affects the function Download of the file /cfgFile/1/download. The manipulation of the argument Name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addi
to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310247 - https://vuldb.com/?ctiid.310247 - https://vuldb.com/?submit.576231 - https://flowus.cn/share/ce95a04b-24e3-477a-bc3d-8344ede95ea8?code=G8A6P3
CVE ID: CVE-2025-5160 State: PUBLISHED Published: 2025-05-26T00:00:12.393Z Last Updated: 2025-05-28T17:37:38.884Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-22 Description: A vulnerability classified as problematic has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected is the function Download of the file /packetCaptureStrategy/download. The manipulation of the argument Name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any
disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310248 - https://vuldb.com/?ctiid.310248 - https://vuldb.com/?submit.576232 - https://flowus.cn/share/3cec9266-793a-498e-acdb-4296b09a8c89?code=G8A6P3
CVE ID: CVE-2025-5161 State: PUBLISHED Published: 2025-05-26T00:31:06.147Z Last Updated: 2025-05-28T17:37:33.415Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-22 Description: A vulnerability classified as problematic was found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this vulnerability is the function operationDailyOut of the file /safeEvent/download. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respo
has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310249 - https://vuldb.com/?ctiid.310249 - https://vuldb.com/?submit.578678 - https://flowus.cn/share/d78abd42-5de8-45f1-a941-a11a2581be0c?code=G8A6P3
CVE ID: CVE-2025-5162 State: PUBLISHED Published: 2025-05-26T01:00:12.485Z Last Updated: 2025-05-28T17:37:28.046Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: H3C Products: SecCenter SMP-E1114P02 Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, has been found in H3C SecCenter SMP-E1114P02 up to 20250513. Affected by this issue is some unknown functionality of the file /safeEvent/importFile/. The manipulation of the argument logGeneralFile/logGeneralFile_2 leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclo
remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310250 - https://vuldb.com/?ctiid.310250 - https://vuldb.com/?submit.578679 - https://flowus.cn/share/ce6c4094-8d97-466c-8fcc-df3f3d6f314e?code=G8A6P3 - https://flowus.cn/share/d6c310ac-a179-499f-9e9a-5c0de80b19be?code=G8A6P3
CVE ID: CVE-2025-5163 State: PUBLISHED Published: 2025-05-26T01:31:04.731Z Last Updated: 2025-05-28T17:37:22.771Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: yangshare 技术杨工 Products: warehouseManager 仓库管理系统 Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0. This affects an unknown part. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Not
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310251 - https://vuldb.com/?ctiid.310251 - https://vuldb.com/?submit.576315 - https://github.com/sumingwjl/cve/issues/1
CVE ID: CVE-2025-5164 State: PUBLISHED Published: 2025-05-26T02:00:06.318Z Last Updated: 2025-05-28T17:37:16.647Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: PerfreeBlog Problem Types: CWE-321, CWE-320 Description: A vulnerability has been found in PerfreeBlog 4.0.11 and classified as problematic. This vulnerability affects the function JwtUtil of the component JWT Handler. The manipulation leads to use of hard-coded cryptographic key . The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted
oitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310252 - https://vuldb.com/?ctiid.310252 - https://vuldb.com/?submit.576433 - https://github.com/147536951/Qiany1/blob/main/Perfreeblog_3.pdf
CVE ID: CVE-2025-5165 State: PUBLISHED Published: 2025-05-26T02:31:05.900Z Last Updated: 2025-05-28T17:37:11.112Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect
g locally is a requirement. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310253 - https://vuldb.com/?ctiid.310253 - https://vuldb.com/?submit.578000 - https://github.com/assimp/assimp/issues/6167 - https://github.com/assimp/assimp/issues/6128 - https://github.com/user-attachments/files/20204942/reproducer.zip
CVE ID: CVE-2025-5166 State: PUBLISHED Published: 2025-05-26T03:00:12.418Z Last Updated: 2025-05-28T17:37:05.775Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Open Asset Import Library Products: Assimp Problem Types: CWE-125, CWE-119 Description: A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as problematic. Affected is the function MDCImporter::InternReadFile of the file assimp/code/AssetLib/MDC/MDCLoader.cpp of the component MDC File Parser. The manipulation of the argument pcVerts leads to out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and