# CVE-2026-10230: Assimp heap overflow in Half-Life 1 MDL Loader

Source: https://junglewise.ai/threats/cve-2026-10230-assimp-heap-overflow-in-half-life-1-mdl-loader  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-06-01. Updated: 2026-06-01  
License: CC BY 4.0 with a link back

CVE-2026-10230 · Severity: medium · CVSS 5.3 · Published 2026-06-01

Assimp is a widely used library that allows software to import various 3D model file formats. A security flaw was found in how it handles Half-Life 1 (MDL) model files, which could allow a local user to crash an application or potentially execute unauthorized code. This could impact businesses using 3D rendering or game development tools that rely on this library to process untrusted model files.

Technologies: [Assimp](https://junglewise.ai/threats/technologies/assimp). Vendors: [Assimp](https://junglewise.ai/threats/vendors/assimp).

## Quick answers

**Is CVE-2026-10230 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-10230 being exploited in the wild.

**How severe is CVE-2026-10230?** Medium severity, with a CVSS score of 5.3, published 1 June 2026.

**Which products and versions are affected?** Assimp up to 6.0.4.

**Is there a fix for CVE-2026-10230?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-10230 attacked?** It is attacked with local access, in a software library.

**Am I affected by CVE-2026-10230?** Check whether you run Assimp at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A heap-based buffer overflow vulnerability exists in Assimp versions up to and including 6.0.4. The flaw is located in the 'Assimp::MDL::HalfLife::HL1MDLLoader::read_animations' function within 'HL1MDLLoader.cpp'. The issue stems from improper bounds checking when processing animation data in Half-Life 1 MDL files. A local attacker can exploit this by providing a specially crafted MDL file, leading to memory corruption. This can result in a denial-of-service (application crash) or potentially arbitrary code execution. A public exploit is reportedly available.

## Affected products

- Assimp Assimp up to 6.0.4

## Timeline

- 2026-06-01: advisory: NVD publication date

## References

- [https://github.com/assimp/assimp/](https://github.com/assimp/assimp/)
- [https://github.com/assimp/assimp/issues/6615](https://github.com/assimp/assimp/issues/6615)
- [https://vuldb.com/cve/CVE-2026-10230](https://vuldb.com/cve/CVE-2026-10230)
- [https://vuldb.com/submit/821190](https://vuldb.com/submit/821190)
- [https://vuldb.com/vuln/367509](https://vuldb.com/vuln/367509)
- [https://vuldb.com/vuln/367509/cti](https://vuldb.com/vuln/367509/cti)

## Related threats

- [Assimp NULL pointer dereference in Ogre3D importer](https://junglewise.ai/threats/cve-2026-111128-assimp-through-6-0-5-contains-a-null-pointer-dereference)
- [Assimp out-of-bounds read in PLY file handler](https://junglewise.ai/threats/cve-2026-108573-a-vulnerability-was-detected-in-open-asset-import-library-assimp)
- [Assimp MDLImporter heap-based buffer overflow in AddBonesToNodeGraph](https://junglewise.ai/threats/cve-2026-19970-assimp-mdlimporter-heap-based-buffer-overflow-in)
- [Assimp MDL importer heap buffer overflow](https://junglewise.ai/threats/cve-2026-19969-assimp-mdl-importer-heap-buffer-overflow)
- [Assimp heap buffer overflow in LWO2 model parser](https://junglewise.ai/threats/cve-2026-19968-assimp-heap-buffer-overflow-in-lwo2-model-parser)