Executive brief
Assimp is a widely used library that allows software to import various 3D model file formats. A security flaw was found in how it handles Half-Life 1 (MDL) model files, which could allow a local user to crash an application or potentially execute unauthorized code. This could impact businesses using 3D rendering or game development tools that rely on this library to process untrusted model files.
Technical details
A heap-based buffer overflow vulnerability exists in Assimp versions up to and including 6.0.4. The flaw is located in the 'Assimp::MDL::HalfLife::HL1MDLLoader::read_animations' function within 'HL1MDLLoader.cpp'. The issue stems from improper bounds checking when processing animation data in Half-Life 1 MDL files. A local attacker can exploit this by providing a specially crafted MDL file, leading to memory corruption. This can result in a denial-of-service (application crash) or potentially arbitrary code execution. A public exploit is reportedly available.
Affected products
- Assimp Assimp up to 6.0.4
Timeline
- 2026-06-01: advisory: NVD publication date