Live › vulnerability › CVE-2026-119718
Blender's point cache reader multiplies an unchecked count when allocating memory, so a crafted cache file alongside a .blend file causes a heap buffer overflow. An attacker who gets a user to open such files can crash Blender or execute code with that user's privileges.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Anyone who opens a .blend file together with a point cache file from an untrusted source in an affected Blender version. Studios and artists who only open their own project files are much less exposed, and the sources do not say whether a file opened by itself triggers the flaw.
No product ranges from the sources yet.
blender --version and compare against 4.5.15 for the 4.5 line and 5.2.3 for the 5.x line.4.5.15 or later5.2.3 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.
This page as .md · .json · in your agent: get_signal("CVE-2026-119718")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.