CVE-2005-4470: blender blenloader
Vulnerability summary
CVE-2005-4470 is a high (CVSS 7.5) vulnerability in blender blenloader. EPSS estimates a 5.79% chance of exploitation in the next 30 days, higher than 93% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 1Timeline
- 22-12-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a .blend file with a negative bhead.len value, which causes less memory to be allocated than expected, possibly due to an integer overflow.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
5.79%
Chance of exploitation in the next 30 days
Percentile
93%
Versus all other CVEs
30-day change
0.00 pp
From 5.79% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
2 foundExploit Reference (overflow.pl)
Maturity: unknown
Exploit Reference (securityfocus.com)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Blender1 product
- blenloader≤ 2.40_pre | 2.0 | 2.04 | 2.25 | 2.26 | 2.27 | 2.28 | 2.28a | 2.28c | 2.30 | 2.31a | 2.32 | 2.33 | 2.33a | 2.34 | 2.35 | 2.37 | 2.37a | 2.39 | 2.40_alpha
Debian1 product
- blender< 2.40-1 | < 2.37a-1.1etch1
2 vendors · 2 products
