DEV Community

CVE Reports
CVE Reports

Posted on • Originally published at cvereports.com

CVE-2025-6120: CVE-2025-6120: Heap-Based Buffer Overflow in Assimp HL1MDLLoader read_meshes

#security #cve #cybersecurity

CVE-2025-6120: Heap-Based Buffer Overflow in Assimp HL1MDLLoader read_meshes

Vulnerability ID: CVE-2025-6120
CVSS Score: 5.3
Published: 2025-06-16

CVE-2025-6120 is a critical memory corruption vulnerability in the Open Asset Import Library (Assimp) affecting versions up to and including 5.4.3. The flaw is located in the Half-Life 1 MDL file format loader, specifically within the read_meshes function in HL1MDLLoader.cpp. It arises due to a lack of verification checks on array, bone, skin, or vertex indices parsed directly from a binary stream, resulting in a heap-based buffer overflow or out-of-bounds memory access.

TL;DR

A heap-based buffer overflow vulnerability in Assimp's Half-Life 1 MDL parser (<= 5.4.3) allows local attackers to cause denial of service or potentially execute arbitrary code via a malformed model file.

⚠️ Exploit Status: POC

Technical Details

  • CWE ID: CWE-122 (Heap-based Buffer Overflow)
  • Attack Vector: Local / Client File Ingestion
  • CVSS v3.1 Score: 5.3 (Medium)
  • EPSS Score: 0.0021
  • Exploit Status: Proof-of-Concept Available
  • CISA KEV Status: Not Listed

Affected Systems

  • Open Asset Import Library (Assimp) <= 5.4.3
  • Assimp: <= 5.4.3 (Fixed in: Not explicitly patched (Tracking issue active))

Exploit Details

  • GitHub: Public exploit reproduction archive containing test cases for read_meshes heap overflow

Mitigation Strategies

  • Disable the vulnerable Half-Life MDL loader component using CMake compilation flags if legacy formats are not required.
  • Run the asset parsing process within an isolated sandbox environment to minimize system-level exposure.

Remediation Steps:

  1. Run the CMake compilation command with the MDL importer disabled: cmake -DASSIMP_BUILD_MDL_IMPORTER=OFF ..
  2. Rebuild and distribute the newly compiled binary library across all application environments.

References

Read the full report for CVE-2025-6120 on our website for more details including interactive diagrams and full exploit analysis.

Top comments (0)