CVE-2008-1102

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted...

6.8 MediumFix available

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Exploit likelihood

3.89%Down 6.0 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: CVE-2008-1102
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: CVE-2008-1102
Updated: 2026-11-02

EUVDEUVD-2008-1111 No score

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: EUVD-2008-1111
Updated: 2026-11-03

GitHub AdvisoriesGHSA-35pm-rxh5-93qj No score

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted...

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: GHSA-35pm-rxh5-93qj
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: CVE-2008-1102
Updated: 2026-11-02

OSVDEBIAN-CVE-2008-1102 No score

Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend file that contains a crafted Radiance RGBE image.

Record: DEBIAN-CVE-2008-1102
Updated: 2026-11-02

Affected products

blender

Affected packages

Affected packages
Package	Affected	Fixed
`blender` Debian:12	before 2.45-5	2.45-5
`blender` Debian:13	before 2.45-5	2.45-5
`blender` Debian:4.0	before 2.42a-7.1+etch1, plus listed versions 2.42a-7	2.42a-7.1+etch1

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2008-1102 is a medium vulnerability (CVSS 6.8) in Blender, published April 21, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.89%, the 90th percentile. Fixed in blender 2.45-5.

References

Show 12 moreShow less