Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-06-01T06:15:09 assimp: Assimp: Local heap-based buffer overflow allows denial of service or arbitrary code execution 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CWE-131

A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project tagged the reported issue as bug.

A flaw was found in Assimp, a library for importing various 3D model formats. A local attacker could exploit a heap-based buffer overflow vulnerability in the Half-Life 1 MDL Loader component. By manipulating a specific argument, an attacker could cause the application to crash, leading to a denial of service, or potentially execute unauthorized code. This could result in a loss of system availability or compromise of data.

This Moderate impact flaw in Assimp's Half-Life 1 MDL Loader component, present in Red Hat Enterprise Linux 9 via qt5-qt3d, requires local access to exploit. An attacker could trigger a heap-based buffer overflow by manipulating a specific argument, potentially leading to a denial of service or arbitrary code execution. The local attack vector and the need for specific input limit the overall risk. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Enterprise Linux 10 Not affected qt6-qtquick3d Red Hat Enterprise Linux 9 Fix deferred qt5-qt3d https://www.cve.org/CVERecord?id=CVE-2026-10231 https://nvd.nist.gov/vuln/detail/CVE-2026-10231 https://github.com/assimp/assimp/ https://github.com/assimp/assimp/issues/6616 https://github.com/user-attachments/files/27195744/poc.zip https://vuldb.com/cve/CVE-2026-10231 https://vuldb.com/submit/821191 https://vuldb.com/vuln/367510 https://vuldb.com/vuln/367510/cti