This vulnerability involves a heap-based buffer overflow in Assimp's HL1MDLLoader::extract_anim_value function, triggered by manipulating the num.total argument. It affects Assimp versions 6.0.0 through 6.0.4. The overflow occurs in the Half-Life 1 MDL Loader component, potentially allowing local attackers to cause memory corruption. The vulnerability requires local privileges to exploit and does not involve user interaction. The issue has been publicly disclosed but no official fix or patch has been provided as of the publication date.

Successful exploitation can lead to heap-based buffer overflow, which may cause application crashes or memory corruption. Given the local attack vector and medium CVSS score, the impact is limited to local users with some privileges. There is no indication of remote exploitation or privilege escalation beyond local access. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch is currently available, users should restrict local access to trusted users only and monitor for updates from the Assimp project. Avoid running untrusted code that could trigger this vulnerability locally.