Description
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Blender Foundation Blender
Default version status: unaffected
0 to < 4.5.15affected5.0.0 to < 5.2.3affected
References
- https://projects.blender.org/blender/blender/pulls/164279 ↗
- https://projects.blender.org/blender/blender/commit/a0c62db3db61803f86e874bc05407890ce4a1e43 ↗
- https://projects.blender.org/blender/blender/commit/4f8a3270213b1ee67b44fe122ace3debdec3de47 ↗
- https://projects.blender.org/blender/blender ↗
- https://www.vulncheck.com/advisories/blender-before-4.5.15-and-5-x-before-5.2.3-heap-buffer-overflow-via-point-cache ↗