An issue in Assimp v.6.0.2 allows a remote attacker to cause a denial of service via the FBXConverter.cpp and ConvertMeshMultiMaterial() method
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Configurations (Affected Products)
No configuration data available.
Assimp 6.0.2
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC for CVE-2025-70069
# This script demonstrates loading a malicious FBX file to trigger the DoS.
import assimp
def exploit():
# Load a crafted FBX file designed to trigger the bug in FBXConverter.cpp
# The file should contain invalid material mapping in ConvertMeshMultiMaterial()
file_path = "malicious_cve_2025_70069.fbx"
try:
scene = assimp.load(file_path)
print("Exploit failed: Application did not crash.")
except Exception as e:
print(f"Exception occurred: {e}")
if __name__ == "__main__":
exploit()