PT-2026-45277

CVE-2026-10233

Published

2026-06-01

Updated

2026-06-01

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5

Description An out-of-bounds read occurs in the Half-Life 1 MDL Loader component within the HL1MDLLoader::read sequence infos() function of the HL1MDLLoader.cpp file. This issue is triggered by the manipulation of the aiString argument and requires local access to be exploited.

Recommendations Update to version 6.0.5 or later. As a temporary workaround, restrict the use of the HL1MDLLoader::read sequence infos() function.

Exploitability

Exploit

Fix

Impacts

Researchers

Tygls

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-125: Out-of-bounds Read

Related identifiers