blender

Disclosed vulnerabilities where the NVD names blender as an affected vendor, highest CVSS first.

1. HIGH 7.8CVE-2026-1197222026-10-30

   Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so fi…

   blender

   AI risk analysis on Exploit-DB.ai →

2. HIGH 7.8CVE-2026-1197192026-10-30

   Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_vertical_flip(). Attackers can craft a .blend file with malicious TEST block dimensio…

   blender

   AI risk analysis on Exploit-DB.ai →

3. HIGH 7.8CVE-2026-1197182026-10-30

   Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a …

   blender

   AI risk analysis on Exploit-DB.ai →

4. MEDIUM 6.1CVE-2026-1197212026-10-30

   Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read ID fields without block length checks. Attackers can supply a crafted .blend file with short ID blocks that, when brows…

   blender

   AI risk analysis on Exploit-DB.ai →

5. MEDIUM 5.5CVE-2026-1197202026-10-30

   Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB block field without validating its declared length. Attackers can supply a crafted .blend file with a truncated GLOB block that, wh…

   blender

   AI risk analysis on Exploit-DB.ai →