Browse CVEs

HIGH 7.5 CVE-2022-2831 A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory co… Blender Patch available Fix from $1,9502022-08-16 HIGH 7.5 CVE-2022-2832 A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidential… Blender Patch available Fix from $1,9502022-08-16 HIGH 7.5 CVE-2022-2833 Endless Infinite loop in Blender-thumnailing due to logical bugs. Blender Patch available Fix from $1,9502022-08-16 HIGH 9.3 CVE-2009-3850EPSS 9% Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoa… Blender No fix yet Fix from $1,9502009-11-06 MEDIUM 6.9 CVE-2008-4863 Untrusted search path vulnerability in BPY_interface in Blender 2.46 allows local users to execute arbitrary code via a Trojan horse Python file in t… Blender Mitigation only Fix from $1,6002008-11-01 MEDIUM 6.9 CVE-2008-1103 Multiple unspecified vulnerabilities in Blender have unknown impact and attack vectors, related to "temporary file issues." Blender No fix yet Fix from $1,6002008-04-28 MEDIUM 6.8 CVE-2008-1102 Stack-based buffer overflow in the imb_loadhdr function in Blender 2.45 allows user-assisted remote attackers to execute arbitrary code via a .blend … Blender Mitigation only Fix from $1,6002008-04-22 HIGH 9.3 CVE-2007-1253 Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted rem… Blender after 2.42a Fix from $1,9502007-03-03 HIGH 7.5 CVE-2005-4470EPSS 6% Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denia… Blenloader after 2.40_pre Fix from $1,9502005-12-22 HIGH 7.5 CVE-2005-3151 Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument. Blender No fix yet Fix from $1,9502005-10-05