Blender Before 4.5.15 And 5 X Before 5.2.3 Heap Buffer Overflow Via Thumbnail Extraction

Back www.vulncheck.com

Blender Before 4.5.15 And 5 X Before 5.2.3 Heap Buffer Overflow Via Thumbnail Extraction

www.vulncheck.com • October 31, 2026

Share: View original

Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction

Blender >= 0, = 0, = 5.0.0, = 5.0.0, < 5.2.3

CWE-190 Integer Overflow or Wraparound

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Blender Heap Buffer Overflow Vulnerabilities Disclosed Two vulnerabilities have been identified in Blender versions prior to 4.5.15 and 5.x before 5.2.3, specifically a heap buffer overflow via thumbnail extraction and point cache. These vulnerabilities could allow attackers to execute arbitrary code. The affected versions include Blender 0, 5.0.0, and any versions below 5.2.3. No specific CVEs were mentioned in the articles, and the current status of exploitation is unclear. Users are advised to update to the latest versions to mitigate potential risks. The vulnerabilities are categorized under CWE-190, indicating an integer overflow or wraparound issue. 37

Extracted Entities

Attack Types (1)

Zero-day Exploit

CWE Weaknesses (1)

CWE-190 - Integer Overflow Or Wraparound

Platforms (1)