CVE-2025-2151: 
NixOS vulnerability analysis and mitigation

A critical vulnerability (CVE-2025-2151) was discovered in Open Asset Import Library (Assimp) version 5.4.3. The vulnerability affects the Assimp::GetNextLine function in the ParsingUtils.h library component of the File Handler. This stack-based buffer overflow vulnerability was disclosed on March 10, 2025 (NVD).

The vulnerability is a stack-based buffer overflow that occurs in the Assimp::GetNextLine function within ParsingUtils.h. The issue arises when the buffer is bigger or equal to BufferSize(4096), causing it to overwrite the null terminator ('\0') of the line variable. The vulnerability has received a CVSS v4.0 score of 5.3 (Medium) and CVSS v3.1 score of 6.3 (Medium). It has been classified under CWE-121 (Stack-based Buffer Overflow) and CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer) (NVD, Github Issue).

The vulnerability can lead to an out-of-bounds write operation and potential application crash. If exploited, an attacker could potentially achieve remote code execution by tricking a victim into processing a malformed file using Assimp::GetNextLine (Github Issue).