Blender vulnerabilities

Products

• Blender 41

Newest

• blender Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct() CVE-2026-119722 8.5 HighOctober 30, 2026
• blender Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors CVE-2026-119721 6.9 MediumOctober 30, 2026
• blender Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block CVE-2026-119720 6.8 MediumOctober 30, 2026
• blender Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction CVE-2026-119719 8.5 HighOctober 30, 2026
• blender Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache CVE-2026-119718 8.5 HighOctober 30, 2026
• blender Blender 3.0.0 - 5.1.2 Out-of-Bounds Read via crafted .blend SDNA block CVE-2026-60103 6.8 MediumJuly 13, 2026
• blender When rendering with headless builds, show an error instead of crashing. Previously... CVE-2022-2832 Fix available 7.5 HighAugust 16, 2022
• blender Endless Infinite loop in Blender-thumnailing due to logical bugs. CVE-2022-2833 Fix available 7.5 HighAugust 16, 2022
• blender A loaded (and valid) image can be crafted such that an out-of-bounds read or write occurs when... CVE-2022-2831 Fix available 7.5 HighAugust 16, 2022
• blender, debian linux, fedoraproject extra packages for enterprise linux +1 more +3 more A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds... CVE-2022-0546 Fix available 7.8 HighFebruary 24, 2022
• blender, debian linux +1 more An integer overflow in the processing of loaded 2D images leads to a write-what-where... CVE-2022-0545 Fix available 7.8 HighFebruary 24, 2022
• blender, debian linux +1 more An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly... CVE-2022-0544 Fix available 5.5 MediumFebruary 24, 2022
• blender, debian linux +1 more An exploitable integer overflow exists in the Image loading functionality of the Blender open... CVE-2017-2918 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source... CVE-2017-2908 Fix available 7.5 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the animation playing functionality of the Blender open... CVE-2017-2907 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the animation playing functionality of the Blender open... CVE-2017-2906 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the bmp loading functionality of the Blender open... CVE-2017-2905 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open... CVE-2017-2904 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the DPX loading functionality of the Blender open... CVE-2017-2903 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the DPX loading functionality of the Blender open... CVE-2017-2902 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the IRIS loading functionality of the Blender open... CVE-2017-2901 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the PNG loading functionality of the Blender open... CVE-2017-2900 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the TIFF loading functionality of the Blender open... CVE-2017-2899 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite... CVE-2017-12105 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite... CVE-2017-12104 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite... CVE-2017-12103 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite... CVE-2017-12102 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of... CVE-2017-12101 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender... CVE-2017-12100 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the... CVE-2017-12099 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of... CVE-2017-12086 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the... CVE-2017-12082 Fix available 8.8 HighApril 24, 2018
• blender, debian linux +1 more An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender... CVE-2017-12081 Fix available 8.8 HighApril 24, 2018
• blender The undo save quit routine in the kernel in Blender 2.5, 2.63a, and earlier allows local users to... CVE-2010-5105 3.3 LowApril 27, 2014
• blender Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a ... CVE-2009-3850 Public exploit 9.3 HighNovember 6, 2009
• blender Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to... CVE-2008-4863 Fix available 6.9 MediumOctober 31, 2008
• blender Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related... CVE-2008-1103 Fix available 6.9 MediumApril 28, 2008
• blender Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted... CVE-2008-1102 Fix available 6.8 MediumApril 21, 2008
• blender Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used... CVE-2007-1253 Fix available 9.3 HighMarch 3, 2007
• blender blenloader Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0... CVE-2005-4470 Fix available 7.5 HighDecember 22, 2005
• blender, debian linux +1 more Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute... CVE-2005-3302 Public exploitFix available 7.5 HighOctober 24, 2005
• blender Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code... CVE-2005-3151 7.5 HighOctober 5, 2005