CVE-2026-10230 PUBLISHED

A vulnerability was identified in Assimp up to 6.0.4. This impacts the function Assimp::MDL::HalfLife::HL1MDLLoader::read_animations of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Such manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available and might be used. The project tagged the reported issue as bug.

• TYGLS (VulDB User) reporter
• VulDB CNA Team coordinator

• VDB-367509 | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow
• VDB-367509 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-10230 | CVE Analysis and Report
• Submit #821190 | Assimp commit 17c12da Heap-based Buffer Overflow
• https://github.com/assimp/assimp/issues/6615
• https://github.com/assimp/assimp/

• Heap-based Buffer Overflow CWE
• Memory Corruption CWE