PT-2026-45274

CVE-2026-10230

Published

2026-06-01

Updated

2026-06-01

Description by

CVSS 3.1

5.3

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5

Description A heap-based buffer overflow occurs in the Half-Life 1 MDL Loader component within the read animations() function of the HL1MDLLoader.cpp file. This issue requires local access to be exploited.

Recommendations Update to version 6.0.5 or later. As a temporary workaround, restrict the use of the read animations() function in the Half-Life 1 MDL Loader component.

Exploitability

Exploit

Fix

Impacts

Researchers

Tygls

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-122: Heap-based Buffer Overflow

Related identifiers