{"id":"CVE-2022-0545","aliases":["DEBIAN-CVE-2022-0545","DLA-3060-1","DSA-5176-1","EUVD-2022-15667","GHSA-vwmp-5fxw-2gwj","UBUNTU-CVE-2022-0545","openSUSE-SU-2024:11859-1","openSUSE-SU-2025:15755-1","openSUSE-SU-2025:15756-1","openSUSE-SU-2026:10560-1","openSUSE-SU-2026:11288-1"],"status":"published","title":"An integer overflow in the processing of loaded 2D images leads to a write-what-where...","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01164,"percentile":0.67484,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2022-02-24T18:27:16Z","modified":"2026-11-08T17:00:06Z","fixes":[{"ecosystem":"Debian:12","package":"blender","fixed_in":["3.1.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"blender","fixed_in":["3.1.2+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"blender","fixed_in":["3.1.2+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.b+dfsg0-1~deb9u2"}]}],"versions":["2.78.a+dfsg0-4","2.78.c+dfsg0-1","2.78.c+dfsg0-2","2.79+dfsg0-1","2.79+dfsg0-2","2.79+dfsg0-3","2.79.a+dfsg0-1","2.79.a+dfsg0-2","2.79.b+dfsg0-1~deb9u1"],"bundled":3},{"source":"osv","ecosystem":"Debian:10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.79.b+dfsg0-7+deb10u1"}]}],"versions":["2.79.b+dfsg0-7"],"bundled":3},{"source":"osv","ecosystem":"Debian:11","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.83.5+dfsg-5+deb11u1"}]}],"versions":["2.83.5+dfsg-5"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.74+dfsg0-4build2","2.75.a+dfsg0-2ubuntu2","2.75.a+dfsg0-2ubuntu3","2.76.b+dfsg0-3","2.76.b+dfsg0-3build1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.78.c+dfsg0-2build1","2.79+dfsg0-2build1","2.79+dfsg0-3","2.79+dfsg0-3build1","2.79.b+dfsg0-1","2.79.b+dfsg0-1ubuntu1.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.80+dfsg-3","2.80+dfsg-3build1","2.80+dfsg-4","2.81.a+dfsg-5build3","2.82+dfsg-1","2.82+dfsg-1build1","2.82.a+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.93.3+dfsg-3","2.93.5+dfsg-1","2.93.5+dfsg-1build1","3.0.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.6.2+dfsg-2ubuntu1","3.6.2+dfsg-2ubuntu2","4.0.2+dfsg-1ubuntu1","4.0.2+dfsg-1ubuntu2","4.0.2+dfsg-1ubuntu4","4.0.2+dfsg-1ubuntu6","4.0.2+dfsg-1ubuntu7","4.0.2+dfsg-1ubuntu8"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2","4.3.2+dfsg-2ubuntu1","4.3.2+dfsg-2ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.0.1+dfsg-1ubuntu1","5.0.1+dfsg-1ubuntu3","5.0.1+dfsg-3build1","5.0.1+dfsg-5"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.2+dfsg-2ubuntu2","5.0.1+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"blender","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.1-2.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"blender-4.5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.4-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"blender-5.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0.0-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"blender-5.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.1-1.1"}]}],"bundled":3},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"blender-5.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.0-1.1"}]}],"bundled":3}],"products":[{"vendor":"blender","product":"blender"},{"vendor":"debian","product":"debian_linux"}],"references":[{"url":"https://developer.blender.org/T94629","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Vendor Advisory","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article"]},{"url":"https://www.debian.org/security/2022/dsa-5176","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0545","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vwmp-5fxw-2gwj"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0545.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-0545","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-0545","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0545","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0544","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0545","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0546","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-0545","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T18:27:16Z","modified":"2024-08-02T23:32:46.403Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:34:41.69911Z"}],"euvd":[{"id":"EUVD-2022-15667","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T18:27:16Z","modified":"2024-08-02T23:32:46Z","updated_at":"2026-11-03T03:26:04.481305Z"}],"ghsa":[{"id":"GHSA-vwmp-5fxw-2gwj","title":"An integer overflow in the processing of loaded 2D images leads to a write-what-where...","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-25T00:00:58Z","modified":"2023-01-27T05:00:53Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:41:46.4155Z"}],"nvd":[{"id":"CVE-2022-0545","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T19:15:09.76Z","modified":"2026-06-17T04:20:48.867Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:07:12.711288Z"}],"osv":[{"id":"DEBIAN-CVE-2022-0545","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T19:15:09.76Z","modified":"2026-11-08T17:00:06.593032023Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-08T17:07:41.883129Z"},{"id":"UBUNTU-CVE-2022-0545","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T19:15:00Z","modified":"2026-10-17T12:55:55.412983865Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:51.630172Z"},{"id":"CVE-2022-0545","description":"An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.","status":"published","published":"2022-02-24T18:27:16Z","modified":"2026-10-28T10:28:59.392610047Z","cwes":["CWE-190"],"updated_at":"2026-11-02T15:44:22.824781Z"},{"id":"DLA-3060-1","title":"blender - security update","status":"published","published":"2022-06-27T00:00:00Z","modified":"2026-03-09T01:18:13.538755Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DSA-5176-1","title":"blender - security update","status":"published","published":"2022-07-04T00:00:00Z","modified":"2026-03-09T02:09:47.821734Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:11859-1","title":"blender-3.0.1-2.1 on GA media","description":"These are all security issues fixed in the blender-3.0.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:11:22.012635Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2025:15755-1","title":"blender-4.5-4.5.4-1.1 on GA media","description":"These are all security issues fixed in the blender-4.5-4.5.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-21T00:00:00Z","modified":"2025-11-22T15:34:24.423443Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2025:15756-1","title":"blender-5.0-5.0.0-1.1 on GA media","description":"These are all security issues fixed in the blender-5.0-5.0.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-11-21T00:00:00Z","modified":"2026-02-04T02:21:18.721558Z","updated_at":"2026-11-02T16:58:37.810934Z"},{"id":"openSUSE-SU-2026:10560-1","title":"blender-5.1-5.1.1-1.1 on GA media","description":"These are all security issues fixed in the blender-5.1-5.1.1-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-04-16T00:00:00Z","modified":"2026-04-17T09:02:02.227614Z","updated_at":"2026-11-02T16:58:38.415593Z"},{"id":"openSUSE-SU-2026:11288-1","title":"blender-5.2-5.2.0-1.1 on GA media","description":"These are all security issues fixed in the blender-5.2-5.2.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-17T00:00:00Z","modified":"2026-07-18T08:45:05.800995294Z","updated_at":"2026-11-02T16:58:38.95195Z"}]}}