CyberSecBulletin

Blender vulnerabilities

We track 4 vulnerabilities in Blender products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2022.

4vulnerabilities
0critical
4high
0exploited
7.7average CVSS score

Latest Blender vulnerabilities

  • 7.5 High severity

    Blender: NULL Pointer Dereference

    CVE-2022-2832BlenderEPSS 1.79%

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

  • 7.5 High severity

    Blender: Out-of-bounds Read

    CVE-2022-2831BlenderEPSS 1.61%

    A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.

  • 7.8 High severity

    Blender: Integer Overflow or Wraparound

    CVE-2022-0546BlenderEPSS 1.17%

    A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

  • 7.8 High severity

    Blender: Integer Overflow or Wraparound

    CVE-2022-0545BlenderEPSS 1.16%

    An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when