CVE-2026-10230

A flaw was found in Assimp, specifically within the Half-Life 1 MDL Loader component. A local attacker could exploit a heap-based buffer overflow vulnerability in the read_animations function of HL1MDLLoader.cpp. This could lead to information disclosure, denial of service, or potentially arbitrary code execution.

This Moderate-impact flaw in Assimp's Half-Life 1 MDL Loader component allows a local attacker to trigger a heap-based buffer overflow by processing a specially crafted MDL file. While this could lead to information disclosure, denial of service, or arbitrary code execution, the requirement for local access and user interaction limits the overall risk in most Red Hat environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.