https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:08:27.297472+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324457 EUVD-2026-324457 2026-10-07T02:08:27.301831+00:00 EUVD-2026-324457 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10233 fkie_cve-2026-10233 2026-10-07T02:08:27.301867+00:00

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.

 https://cve.radiocsirt.org/vuln/ghsa-964j-jgrw-m572 GHSA-964j-jgrw-m572 2026-10-07T02:08:27.301899+00:00

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-10233 UBUNTU-CVE-2026-10233 2026-10-07T02:08:27.301917+00:00

Affected: Ubuntu:16.04:LTS: assimp, Ubuntu:18.04:LTS: assimp, Ubuntu:20.04:LTS: assimp, Ubuntu:22.04:LTS: assimp, Ubuntu:24.04:LTS: assimp, Ubuntu:25.10: assimp, Ubuntu:26.04:LTS: assimp

A security vulnerability has been detected in Assimp up to 6.0.4. Affected by this issue is the function HL1MDLLoader::read_sequence_infos of the file HL1MDLLoader.cpp of the component Half-Life 1 MDL Loader. The manipulation of the argument aiString leads to out-of-bounds read. The attack needs to be performed locally. The exploit has been disclosed publicly and may be used. The project tagged the reported issue as bug.