Beveiligingsadvies

CVE-2026-10233

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-01 06:45:08

Laatst bijgewerkt 2026-06-03 17:57:19

Toegewezen door VulDB

CVSS-score 4.8

Status PUBLISHED

Beschrijving

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.

← Alle CVE's bekijken Bekijk op cve.org ↗