Live › vulnerability › CVE-2026-119722
Blender before 4.5.15 and 5.x before 5.2.3 mishandles size checks when reading .blend files, so a crafted file can read and write past heap buffers. An attacker who gets a user to open the file can crash Blender or possibly run code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 16:31 UTC. All times on this page are UTC.
Anyone who opens .blend files in an affected Blender build, including files downloaded from the internet or shared by others. Pipelines that only render files created in-house and never accept outside .blend files are less exposed. unknown for whether a server-side rendering service is involved.
No product ranges from the sources yet.
blender --version and compare the version against the fixed ranges.4.5.15 for the 4.5 line5.2.3 for the 5.x lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-119722")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.