CVE-2026-10231

A flaw was found in Assimp, a library for importing various 3D model formats. A local attacker could exploit a heap-based buffer overflow vulnerability in the Half-Life 1 MDL Loader component. By manipulating a specific argument, an attacker could cause the application to crash, leading to a denial of service, or potentially execute unauthorized code. This could result in a loss of system availability or compromise of data.

This Moderate impact flaw in Assimp's Half-Life 1 MDL Loader component, present in Red Hat Enterprise Linux 9 via qt5-qt3d, requires local access to exploit. An attacker could trigger a heap-based buffer overflow by manipulating a specific argument, potentially leading to a denial of service or arbitrary code execution. The local attack vector and the need for specific input limit the overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.