CVE-2026-10233— Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10233
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds
Source: NVD (National Vulnerability Database)
Vulnerability Description
A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
跨界内存读
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Assimp | 6.0.0 | cpe:2.3:a:assimp:assimp:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-10233
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10233
请登录查看更多情报信息。
Proof of Concept for CVE-2026-10233 (1)
Other References for CVE-2026-10233 (1)
Other References for CVE-2026-10233 (1)
Same Patch Batch · n/a · 2026-06-01 · 7 CVEs total
| CVE-2026-10240 | 6.3 MEDIUM | JeecgBoot test server-side request forgery |
| CVE-2026-10239 | 6.3 MEDIUM | JeecgBoot edit WordUtil.addImage server-side request forgery |
| CVE-2026-10232 | 5.3 MEDIUM | Assimp ASE File scene.cpp ~aiNode use after free |
| CVE-2026-10231 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow |
| CVE-2026-10230 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow |
| CVE-2026-10229 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow |
IV. Related Vulnerabilities
Same product: Assimp
- CVE-2026-10232
Assimp ASE File scene.cpp ~aiNode use after free - CVE-2026-10231
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_ - CVE-2026-10230
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animatio - CVE-2026-10229
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes h - CVE-2026-10201
Assimp UV Channel FBXExporter.cpp WriteObjects divide by zer
Same vendor: n/a
- CVE-2026-10240
JeecgBoot test server-side request forgery - CVE-2026-10239
JeecgBoot edit WordUtil.addImage server-side request forgery - CVE-2026-10232
Assimp ASE File scene.cpp ~aiNode use after free - CVE-2026-10231
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_ - CVE-2026-10230
Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animatio
Same weakness: CWE-125
- CVE-2026-8796
Sereal::Decoder versions before 5.005 for Perl allow heap ou - CVE-2026-5071
can: Local Denial of Service via SocketCAN Send - CVE-2026-45613
Rizin: Heap-buffer-overflow in OMF parser - CVE-2026-46344
liboqs: Heap-buffer-overflow in XMSS verification path via O - CVE-2025-41278
Waterfall WF-500 RX 7.10.0越界读漏洞
V. Comments for CVE-2026-10233
No comments yet