CVE-2026-10229: Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow
A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::readmeshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project tagged the reported issue as bug.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10229?
The severity of CVE-2026-10229 is medium with a score of 5.3.
How do I fix CVE-2026-10229?
To fix CVE-2026-10229, update Assimp to the latest version that addresses the heap-based buffer overflow vulnerability.
What type of vulnerability is CVE-2026-10229?
CVE-2026-10229 is classified as a buffer overflow vulnerability.
What component is affected by CVE-2026-10229?
CVE-2026-10229 affects the Half-Life 1 MDL Loader in the Assimp library.
Can CVE-2026-10229 be exploited remotely?
No, CVE-2026-10229 requires local execution for exploitation.