The vulnerability in the Open Asset Import Library's Assimp component manifests as a double‑free condition in the ExportToBlob function of PlyLoader.cpp. A maliciously crafted PLY file can cause the same heap block to be freed twice, corrupting memory and potentially terminating the application. This manifests as a heap memory corruption scenario that is reflected by CWE-119, CWE-415, and CWE-1341. The description does not indicate that this vulnerability leads to arbitrary code execution; the impact is restricted to application crashes or denial of service.

Any installation of Assimp version 6.0.4 or earlier that uses the PLY Model Handler is affected. Applications that import or export PLY files and invoke ExportToBlob are at risk. Systems that never parse or export PLY files, or that have disabled the PLY handler, are not affected by this specific defect.

The CVSS score of 5.3 indicates moderate severity. The EPSS score of < 1% implies a very low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is remote: an adversary can supply a crafted PLY file to an application that processes PLY data, triggering the double‑free and causing the application to crash or become unavailable. No privilege escalation or data disclosure is implied by the current description.