CVE-2026-10233

A flaw was found in Assimp, within its Half-Life 1 MDL Loader component. A local attacker could exploit an out-of-bounds read vulnerability by manipulating specific input. This could lead to the disclosure of sensitive information.

This flaw is rated as Low impact because it requires a local attacker to provide specially crafted Half-Life 1 MDL files to an application using the Assimp library. Successful exploitation of this out-of-bounds read vulnerability in the Half-Life 1 MDL Loader component could lead to information disclosure, but only under conditions where a local user can control the input to the vulnerable component.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.