CVE-2026-10231: Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow
A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extractanimvalue of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project tagged the reported issue as bug.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-10231?
The severity of CVE-2026-10231 is medium with a score of 5.3.
How do I fix CVE-2026-10231?
To fix CVE-2026-10231, update Assimp to version 6.0.5 or later, which addresses the heap-based buffer overflow vulnerability.
What type of vulnerability is CVE-2026-10231?
CVE-2026-10231 is classified as a buffer overflow vulnerability.
What component is affected by CVE-2026-10231?
CVE-2026-10231 affects the Half-Life 1 MDL Loader component in Assimp.
What is the consequence of exploiting CVE-2026-10231?
Exploiting CVE-2026-10231 can lead to heap-based buffer overflow, potentially allowing arbitrary code execution.