4.8
Medium
CVE-2026-10233 A security vulnerability has been detected in Assimp up to 6.0.4
Description
A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Assimp 6.0 | 6.0.0 → 6.0.4 | No fix stated |
Other CVEs of Assimp
The 10 CVEs of Assimp →
CVE-2026-10232
A weakness has been identified in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10231
A security flaw has been discovered in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10230
A vulnerability was identified in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10229
A vulnerability was determined in Assimp up to 6.0.4
4.8
Medium