CVE-2026-10229

Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow

State: Published
Severity: 4.8 Medium
Published: Jun 1, 2026
Updated: Jun 1, 2026
Reserved: May 31, 2026

Description

A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project tagged the reported issue as bug.

Scores

CVSS	Score	Vector	Source
4.0	4.8 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	5.3 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
3.0	5.3 Medium	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R	VulDB
2.0	4.3 Medium	AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-122 Heap-based Buffer Overflow
CWE-119 Memory Corruption

Affected Products

Product	Versions
Assimpn/a	6.0.0Affected 6.0.1Affected 6.0.2Affected 6.0.3Affected 6.0.4Affected

References

VDB-367508 | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflowvdb-entrytechnical-description
VDB-367508 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
CVE-2026-10229 | CVE Analysis and Reportthird-party-advisory
Submit #821189 | Assimp commit 17c12da Heap-based Buffer Overflowthird-party-advisory
https://github.com/assimp/assimp/issues/6614issue-tracking
https://github.com/user-attachments/files/27194364/poc.zipexploit
https://github.com/assimp/assimp/product

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.