CVE-2026-10231

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5

Description A heap-based buffer overflow occurs in the Half-Life 1 MDL Loader component within the HL1MDLLoader::extract anim value() function of the HL1MDLLoader.cpp file. This issue is triggered by manipulating the num.total argument and requires the attack to be initiated from a local position.

Recommendations Update to version 6.0.5 or later. As a temporary workaround, restrict the use of the Half-Life 1 MDL Loader component.