CVE-2026-10231

A security flaw has been discovered in Assimp up to 6.0.4. Affected is the function HL1MDLLoader::extract_anim_value of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. Performing a manipulation of the argument num.total results in heap-based buffer overflow. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The project tagged the reported issue as bug.

• CWE-119
• CWE-122

• https://github.com/assimp/assimp/
• https://github.com/assimp/assimp/issues/6616
• https://github.com/user-attachments/files/27195744/poc.zip
• https://vuldb.com/cve/CVE-2026-10231
• https://vuldb.com/submit/821191
• https://vuldb.com/vuln/367510
• https://vuldb.com/vuln/367510/cti

Published

Jun 1, 2026

Last Modified

Jul 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-10226A flaw has been found in raisulislamg4 student_management_sy…7.3
• CVE-2026-10227A vulnerability has been found in raisulislamg4 student_mana…7.3
• CVE-2026-10228A vulnerability was found in raisulislamg4 student_managemen…3.5
• CVE-2026-10229A vulnerability was determined in Assimp up to 6.0.4. This a…5.3
• CVE-2026-1023Statistics Database System developed by Gotac has a Missing …8.7
• CVE-2026-10230A vulnerability was identified in Assimp up to 6.0.4. This i…5.3
• CVE-2026-10232A weakness has been identified in Assimp up to 6.0.4. Affect…5.3
• CVE-2026-10233A security vulnerability has been detected in Assimp up to 6…3.3
• CVE-2026-10234A vulnerability was detected in Mettle sendportal up to 3.0.…3.5
• CVE-2026-10235A flaw has been found in CodeAstro Ingredients Stock Managem…6.3
• CVE-2026-10236A vulnerability has been found in SourceCodester Water Billi…7.3
• CVE-2026-10237A vulnerability was found in SourceCodester Water Billing Ma…4.7