Blender Foundation vulnerabilities
5 vulnerabilities
Known vulnerabilities in Blender Foundation products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Blender5 vulnerabilities
RoutineCVE-2026-119722blender foundation · blender +3 moreBlender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.CVSS8.5HighEPSS0.18%RoutineCVE-2026-119721blender foundation · blender +3 moreBlender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id AccessorsAttackers can supply a crafted .blend file with short ID blocks that, when browsed or appended from, causes heap over-reads leading to crashes or heap memory disclosure.CVSS6.9MediumEPSS0.17%RoutineCVE-2026-119720blender foundation · blender +3 moreBlender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB BlockAttackers can supply a crafted .blend file with a truncated GLOB block that, when opened, triggers the out-of-bounds read and crashes Blender.CVSS6.8MediumEPSS0.13%RoutineCVE-2026-119719blender foundation · blender +3 moreBlender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail ExtractionAttackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write when blender-thumbnailer or the Windows shell extension previews it, causing crashes or code execution.CVSS8.5HighEPSS0.16%RoutineCVE-2026-119718blender foundation · blender +3 moreBlender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point CacheAttackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.CVSS8.5HighEPSS0.19%