PT-2026-45277 · Undefined · Undefined

Tygls · Published 2026-06-01 · Updated 2026-06-01 · CVE-2026-10233

NVD

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:P/I:N/A:N

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read sequence infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.

Exploit

Fix

Out of bounds Read

Buffer Overflow

Weakness Enumeration

CWE-125

CWE-119

Related Identifiers

CVE-2026-10233

Affected Products

Undefined

References · 8

• 🔥❌ https://github.com/user-attachments/files/27228962/poc.zip · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2026-10233 · Security Note
• https://github.com/assimp/assimp/issues/6619 · Note
• https://vuldb.com/cve/CVE-2026-10233 · Note
• https://vuldb.com/vuln/367512/cti · Note
• https://github.com/assimp/assimp · Note
• https://vuldb.com/submit/821196 · Note
• https://vuldb.com/vuln/367512 · Note