24 results · Clear filters · Feed
-
High 7.8
Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so f…
-
High 7.8
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_vertical_flip(). Attackers can craft a .blend file with malicious TEST block dimensi…
-
High 7.8
Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a…
-
High 8.8
An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d cre…
-
High 8.8
An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation…
-
High 8.8
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a parti…
-
High 8.8
An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-sour…
-
High 8.8
An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source…
-
High 8.8
An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3…
-
High 8.8
An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creati…
-
High 8.8
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves…
-
High 8.8
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text r…
-
High 8.8
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particl…
-
High 8.8
An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite v…
-
High 8.8
An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation sui…
-
High 8.8
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ve…
-
High 8.8
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite ve…
-
High 8.8
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite ve…
-
High 8.8
An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite …
-
High 7.5
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite vers…
-
High 8.8
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation su…
-
High 8.8
An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite v…
-
High 8.8
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite ve…
-
High 8.8
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation su…