PT-2026-45273 · Undefined · Undefined

Tygls · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10229

Mitre

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

A vulnerability was determined in Assimp up to 6.0.4. This affects the function HL1MDLLoader::read meshes of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. This manipulation causes heap-based buffer overflow. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. The project tagged the reported issue as bug.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2026-10229

Affected Products

Undefined

References · 8

• 🔥❌ https://github.com/user-attachments/files/27194364/poc.zip · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-10229 · Security Note
• https://github.com/assimp/assimp/issues/6614 · Note
• https://vuldb.com/cve/CVE-2026-10229 · Note
• https://github.com/assimp/assimp · Note
• https://vuldb.com/vuln/367508 · Note
• https://vuldb.com/submit/821189 · Note
• https://vuldb.com/vuln/367508/cti · Note