This vulnerability affects Assimp versions 6.0.0 through 6.0.4 in the aiNode::~aiNode function of the ASE File Parser component (scene.cpp). It is a use-after-free condition that can be triggered by local manipulation. The vulnerability was publicly disclosed and tagged as a bug by the project. The CVSS 4.0 vector indicates it requires local attack vector with low complexity and privileges, no user interaction, and partial impact on confidentiality, integrity, and availability. No vendor advisory or patch information is provided.

Successful exploitation of this vulnerability could lead to use-after-free conditions, potentially causing application crashes or undefined behavior. The impact is limited by the requirement for local access and low privileges. There is no evidence of remote exploitation or widespread active exploitation in the wild. The medium severity reflects the moderate risk posed by this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor the Assimp project for updates addressing this issue. Until a fix is available, restricting local access to trusted users and environments may reduce risk.