Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB block field without validating its declared length. Attackers can supply a crafted .blend file with a truncated GLOB block that, when opened, triggers the out-of-bounds read and crashes Blender.

Etkilenen sürümler1 yazılım

Kaynaklar7 kaynak

• CVE.org kaydı
• NVD kaydı
• projects.blender.org/blender/blender/pulls/164279 Yama
• projects.blender.org/…ommit/c5d6faf04bf3f17efb6c404896ef0e7427784da5 Yama
• projects.blender.org/…ommit/7de4986e74ed47f67e78eb4b76609bb6d1ae8a0e Yama
• vulncheck.com/…before-5.2.3-out-of-bounds-read-via-glob-block Üçüncü taraf
• projects.blender.org/blender/blender Diğer

Kayıt geçmişi

1. 30 Eki 2026 18:16Yayımlandı

İlgili açıklar

• 7,8 CVE-2026-119722Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()
• 6,1 CVE-2026-119721Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via blo_bhead_id Accessors
• 7,8 CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction
• 7,8 CVE-2026-119718Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache
• 7,9 CVE-2026-62958libriscv: Out of bounds read vuln in the ELF parser (Denial of service)
• 6,9 CVE-2026-119338Tesseract: Double free and use after free in the PAGE XML renderer on right-to-left pages