Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Point Cache

Summary

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.

Remediation

1. Inventory every Blender Foundation Blender deployment, including staging.
2. Upgrade Blender Foundation Blender to the fixed version for your release line, listed under Affected versions.
3. Confirm the running version after the upgrade.

References

• Patchhttps://projects.blender.org/blender/blender/commit/4f8a3270213b1ee67b44fe122ace3debdec3de47
• Patchhttps://projects.blender.org/blender/blender/commit/a0c62db3db61803f86e874bc05407890ce4a1e43
• Patchhttps://projects.blender.org/blender/blender/pulls/164279
• Advisoryhttps://www.vulncheck.com/advisories/blender-before-4.5.15-and-5-x-before-5.2.3-heap-buffer-overflow-via-point-cache
• Referencehttps://projects.blender.org/blender/blender