4.8
Medium
CVE-2026-10231 A security flaw has been discovered in Assimp up to 6.0.4
Description
A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project tagged the reported issue as bug.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Assimp 6.0 | 6.0.0 → 6.0.4 | No fix stated |
Other CVEs of Assimp
The 10 CVEs of Assimp →
CVE-2026-10233
A security vulnerability has been detected in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10232
A weakness has been identified in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10230
A vulnerability was identified in Assimp up to 6.0.4
4.8
Medium
CVE-2026-10229
A vulnerability was determined in Assimp up to 6.0.4
4.8
Medium