CVE-2026-119718

blender: blender: Arbitrary code execution via crafted point cache file

blender

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.

30. Okt 2026

Ausgewertete Quellen

• Red Hat
  Red Hat
• Hinweis
  https://www.vulncheck.com/advisories/blender-before-4.5.15-and-5-x-before-5.2.3-heap-buffer-overflow-via-point-cache
• NVD
  CVE-2026-119718