{"vulnerability": "CVE-2025-6120", "sightings": [{"uuid": "a444ab4a-d7ff-49af-8958-62c547834c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18447", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-6120\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Open Asset Import Library Assimp up to 5.4.3. Affected by this vulnerability is the function read_meshes in the library assimp/code/AssetLib/MDL/HalfLife/HL1MDLLoader.cpp. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The project decided to collect all Fuzzer bugs in a main-issue to address them in the future.\n\ud83d\udccf Published: 2025-06-16T11:31:06.030Z\n\ud83d\udccf Modified: 2025-06-16T11:31:06.030Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.312589\n2. https://vuldb.com/?ctiid.312589\n3. https://vuldb.com/?submit.591235\n4. https://github.com/assimp/assimp/issues/6220\n5. https://github.com/assimp/assimp/issues/6220#issuecomment-2945018579\n6. https://github.com/user-attachments/files/20605340/read_meshes_reproduce.tar.gz", "creation_timestamp": "2025-06-16T12:42:55.000000Z"}, {"uuid": "459a3142-0f5c-4dda-8825-79b34634b11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-6120", "type": "seen", "source": "https://gist.github.com/alon710/4b7457cdf2e8aa38f81dadffcaea2c03", "content": "# CVE-2025-6120: CVE-2025-6120: Heap-Based Buffer Overflow in Assimp HL1MDLLoader read_meshes\n\n> **CVSS Score:** 5.3\n> **Published:** 2025-06-16\n> **Full Report:** https://cvereports.com/reports/CVE-2025-6120\n\n## Summary\nCVE-2025-6120 is a critical memory corruption vulnerability in the Open Asset Import Library (Assimp) affecting versions up to and including 5.4.3. The flaw is located in the Half-Life 1 MDL file format loader, specifically within the read_meshes function in HL1MDLLoader.cpp. It arises due to a lack of verification checks on array, bone, skin, or vertex indices parsed directly from a binary stream, resulting in a heap-based buffer overflow or out-of-bounds memory access.\n\n## TL;DR\nA heap-based buffer overflow vulnerability in Assimp's Half-Life 1 MDL parser (<= 5.4.3) allows local attackers to cause denial of service or potentially execute arbitrary code via a malformed model file.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-122 (Heap-based Buffer Overflow)\n- **Attack Vector**: Local / Client File Ingestion\n- **CVSS v3.1 Score**: 5.3 (Medium)\n- **EPSS Score**: 0.0021\n- **Exploit Status**: Proof-of-Concept Available\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- Open Asset Import Library (Assimp) <= 5.4.3\n- **Assimp**: <= 5.4.3 (Fixed in: `Not explicitly patched (Tracking issue active)`)\n\n## Mitigation\n\n- Disable the vulnerable Half-Life MDL loader component using CMake compilation flags if legacy formats are not required.\n- Run the asset parsing process within an isolated sandbox environment to minimize system-level exposure.\n\n**Remediation Steps:**\n1. Run the CMake compilation command with the MDL importer disabled: `cmake -DASSIMP_BUILD_MDL_IMPORTER=OFF ..`\n2. Rebuild and distribute the newly compiled binary library across all application environments.\n\n## References\n\n- [GitHub Issue Tracker - Bug Report #6220](https://github.com/assimp/assimp/issues/6220)\n- [GitHub Issue Tracker - Maintainer Response Comment](https://github.com/assimp/assimp/issues/6220#issuecomment-2945018579)\n- [VulDB Entry for CVE-2025-6120](https://vuldb.com/?id.312589)\n- [VulDB CTI Indicators](https://vuldb.com/?ctiid.312589)\n- [VulDB Submission Details](https://vuldb.com/?submit.591235)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-6120) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-07-29T01:31:18.792529Z"}]}