CVE-2026-10229: Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow

Severity: medium (CVSS 5.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-06-01 · updated 2026-07-22
Weakness: CWE-119

Description

A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read_meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project tagged the reported issue as bug.

Affected products

Assimp: 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4

References

https://github.com/assimp/assimp/
https://github.com/assimp/assimp/issues/6614
https://github.com/user-attachments/files/27194364/poc.zip
https://vuldb.com/cve/CVE-2026-10229
https://vuldb.com/submit/821189
https://vuldb.com/vuln/367508
https://vuldb.com/vuln/367508/cti

Get alerted when CVE-2026-10229 or the next vulnerability affects your stack