Back Linuxsecurity

Fedora 43: assimp Library Critical CVE-2025

Linuxsecurity •LinuxSecurity Advisories • December 17, 2025

Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications. Update Information : Backport fix for CVE-2025-11277

Assimp, the Open Asset Import Library, is a free library to import

various well-known 3D model formats into applications. Assimp aims

to provide a full asset conversion pipeline for use in game

engines and real-time rendering systems, but is not limited

to these applications.

Backport fix for CVE-2025-11277

* Sun Dec 14 2025 Sandro Mani - 6.0.2-4 - Backport fix for CVE-2025-11277

Fedora Update Notification FEDORA-2025-0f4b31c58e 2025-12-17 01:12:56.966718+00:00 Name : assimp Product : Fedora 43 Version : 6.0.2 Release : 4.fc43 URL : Summary : Library to import various 3D model formats into applications Description : Assimp, the Open Asset Import Library, is a free library to import various well-known 3D model formats into applications. Assimp aims to provide a full asset conversion pipeline for use in game engines and real-time rendering systems, but is not limited to these applications.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-0f4b31c58e' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2025-11277 Fix for Assimp Library in Fedora 42 and 43 The Assimp library, used for importing 3D model formats, has a critical heap overflow vulnerability identified as CVE-2025-11277. Fedora has released backport fixes for this vulnerability affecting versions 42 and 43 of the operating system. Users are advised to update their systems to mitigate potential risks associated with this flaw. 2 sources 52

Extracted Entities

Companies (1)

Fedora

CVEs (1)

CVE-2025-11277