{"id":"CVE-2026-119721","kind":"vulnerability","aliases":["CVE-2026-119721"],"related":[],"title":"Blender: crafted .blend file reads past heap buffer in file loader","description":"Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in readfile.cc that read ID fields without block length checks. Attackers can supply a crafted .blend file with short ID blocks that, when browsed or appended from, causes heap over-reads leading to crashes or heap memory disclosure.","summary":"Blender's file reader reads ID fields from short blocks without checking their length, so a crafted .blend file can read past the end of a heap buffer. An attacker can use this to crash Blender or disclose heap memory when the file is browsed or appended from.","severity":"medium","cvss":6.9,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["3d-pipelines","blender","desktop-apps","package"],"not_affected_if":["blender-current-version","only-internal-files"],"how_to_check":"- Run `blender --version` and compare against the fixed ranges below.\n- Check whether any workflow opens or appends .blend files from untrusted sources.","fix":"- Blender before `4.5.15` to `4.5.15`\n- Blender 5.x before `5.2.3` to `5.2.3`","status":"open","published_at":"2026-10-30T16:17:55+00:00","first_seen_at":"2026-10-30T16:31:27+00:00","triaged_at":"2026-10-30T16:32:07+00:00","updated_at":"2026-10-30T16:32:07+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-30T16:32:07Z","model":"claude-haiku-5-5","output":{"fix":"- Blender before `4.5.15` to `4.5.15`\n- Blender 5.x before `5.2.3` to `5.2.3`","reach":"local","title":"Blender: crafted .blend file reads past heap buffer in file loader","impact":"medium","summary":"Blender's file reader reads ID fields from short blocks without checking their length, so a crafted .blend file can read past the end of a heap buffer. An attacker can use this to crash Blender or disclose heap memory when the file is browsed or appended from.","audience":"businesses","category":"package","nicknames":[],"who_cares":["blender","3d-pipelines","desktop-apps"],"confidence":0.6,"fix_status":"available","needs_auth":"no","worst_case":"Blender crashes or leaks heap memory contents to the attacker","analyst_note":"","how_to_check":"- Run `blender --version` and compare against the fixed ranges below.\n- Check whether any workflow opens or appends .blend files from untrusted sources.","plain_action":"","needs_analyst":false,"not_affected_if":["only-internal-files","blender-current-version"],"who_is_affected":"Teams that open or append .blend files from sources they do not fully trust, such as downloaded assets or files shared by outside contractors, are exposed. Systems where Blender only opens files created internally can skip it for now.","user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"medium"},"cost_usd":0.000666,"input_tokens":4173,"output_tokens":497,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-119721':14A,17A '-2026':13A,16A '3d':19B '3d-pipelines':18B '4.5.15':75C '5':77C '5.2.3':80C 'accessor':93C 'app':24B 'append':72B,119C 'attack':55B,104C 'bhead':91C 'blend':3A,43B,109C 'blender':1A,21B,26B,61B,73C 'blo':90C 'block':35B,101C,114C 'bound':86C 'brows':70B,117C 'buffer':8A,53B 'caus':121C 'check':37B,103C 'contain':81C 'craft':2A,42B,108C 'crash':60B,128C 'cve':12A,15A 'desktop':23B 'desktop-app':22B 'disclos':63B 'disclosur':132C 'end':49B 'field':32B,99C 'file':4A,10A,28B,44B,68B,110C 'heap':7A,52B,64B,122C,130C 'id':31B,92C,98C,113C 'lead':126C 'length':39B,102C 'loader':11A 'memori':65B,131C 'out-of-bound':83C 'over-read':123C 'packag':25B 'past':6A,47B 'pipelin':20B 'read':5A,30B,46B,87C,97C,125C 'reader':29B 'readfile.cc':95C 'short':34B,112C 'suppli':106C 'use':57B 'vulner':88C 'without':36B,100C 'x':78C","nicknames":[],"mitigations":[],"who_affected":"Teams that open or append .blend files from sources they do not fully trust, such as downloaded assets or files shared by outside contractors, are exposed. Systems where Blender only opens files created internally can skip it for now.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T16:17:55+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"disclosure@vulncheck.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-119721","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-119721","severity":null,"published_at":"2026-10-30T16:17:55+00:00","modified_at":"2026-10-30T16:17:55+00:00","first_seen_at":"2026-10-30T16:31:27+00:00","fetched_at":"2026-10-30T16:31:27+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}