PT-2026-45273 · Debian+2 · Assimp

Tygls · CVE-2026-10229 · Published 2026-06-01 · Updated 2026-06-01

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Assimp versions prior to 6.0.5

Description A heap-based buffer overflow occurs in the Half-Life 1 MDL Loader component. The issue is located within the read meshes() function of the HL1MDLLoader.cpp file. This flaw allows for local execution of an attack.

Recommendations Update to version 6.0.5 or later. As a temporary workaround, restrict the use of the Half-Life 1 MDL Loader component.

Exploit

Fix

Heap Based Buffer Overflow

Buffer Overflow

Weakness Enumeration

CWE-122

CWE-119

Related Identifiers

CVE-2026-10229

Affected Products

Assimp

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10229.json · Exploit
• 🔥❌ https://github.com/user-attachments/files/27194364/poc.zip · Exploit, Deleted
• https://cve.org/CVERecord?id=CVE-2026-10229 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-10229 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-10229 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-10229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-10229 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-10229 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-10229 · Vendor Advisory
• https://github.com/assimp/assimp/issues/6614 · Note
• https://github.com/assimp/assimp · Note
• https://vuldb.com/vuln/367508/cti · Note
• https://vuldb.com/submit/821189 · Note
• https://vuldb.com/vuln/367508 · Note
• https://vuldb.com/cve/CVE-2026-10229 · Note