Blender
by Blender
Source repositories
CVEs (36)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-12081 | Hig | 0.51 | 7.8 | 0.02 | Apr 24, 2018 | An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context… | ||
| CVE-2005-3302 | Hig | 0.51 | 7.3 | 0.04 | Oct 24, 2005 | Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call. | ||
| CVE-2009-3850 | 0.04 | — | 0.09 | Nov 6, 2009 | Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA. | |||
| CVE-2022-2832 | 0.00 | — | 0.01 | Aug 16, 2022 | A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity. | |||
| CVE-2022-2833 | 0.00 | — | 0.01 | Aug 16, 2022 | Endless Infinite loop in Blender-thumnailing due to logical bugs. | |||
| CVE-2022-2831 | 0.00 | — | 0.01 | Aug 16, 2022 | A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption. | |||
| CVE-2022-0546 | 0.00 | — | 0.01 | Feb 24, 2022 | A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution. | |||
| CVE-2022-0545 | 0.00 | — | 0.01 | Feb 24, 2022 | An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially… | |||
| CVE-2022-0544 | 0.00 | — | 0.01 | Feb 24, 2022 | An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1. | |||
| CVE-2010-5105 | 0.00 | — | 0.00 | Apr 27, 2014 | The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103. | |||
| CVE-2008-4863 | 0.00 | — | 0.00 | Nov 1, 2008 | Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function. | |||
| CVE-2008-1103 | 0.00 | — | 0.00 | Apr 28, 2008 | Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues." | |||
| CVE-2008-1102 | 0.00 | — | 0.04 | Apr 22, 2008 | Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image. | |||
| CVE-2007-1253 | 0.00 | — | 0.03 | Mar 3, 2007 | Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file. | |||
| CVE-2005-4470 | 0.00 | — | 0.06 | Dec 22, 2005 | Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which… | |||
| CVE-2005-3151 | 0.00 | — | 0.03 | Oct 5, 2005 | Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument. |
- risk 0.51cvss 7.8epss 0.02
An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context…
- risk 0.51cvss 7.3epss 0.04
Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.
- CVE-2009-3850Nov 6, 2009risk 0.04cvss —epss 0.09
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA.
- CVE-2022-2832Aug 16, 2022risk 0.00cvss —epss 0.01
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.
- CVE-2022-2833Aug 16, 2022risk 0.00cvss —epss 0.01
Endless Infinite loop in Blender-thumnailing due to logical bugs.
- CVE-2022-2831Aug 16, 2022risk 0.00cvss —epss 0.01
A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.
- CVE-2022-0546Feb 24, 2022risk 0.00cvss —epss 0.01
A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
- CVE-2022-0545Feb 24, 2022risk 0.00cvss —epss 0.01
An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially…
- CVE-2022-0544Feb 24, 2022risk 0.00cvss —epss 0.01
An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
- CVE-2010-5105Apr 27, 2014risk 0.00cvss —epss 0.00
The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to overwrite arbitrary files via a symlink attack on the quit.blend temporary file. NOTE: this issue might be a regression of CVE-2008-1103.
- CVE-2008-4863Nov 1, 2008risk 0.00cvss —epss 0.00
Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to an erroneous setting of sys.path by the PySys_SetArgv function.
- CVE-2008-1103Apr 28, 2008risk 0.00cvss —epss 0.00
Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues."
- CVE-2008-1102Apr 22, 2008risk 0.00cvss —epss 0.04
Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.
- CVE-2007-1253Mar 3, 2007risk 0.00cvss —epss 0.03
Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file.
- CVE-2005-4470Dec 22, 2005risk 0.00cvss —epss 0.06
Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which…
- CVE-2005-3151Oct 5, 2005risk 0.00cvss —epss 0.03
Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.
Page 2 of 2