PatchTheCVEblender vulnerabilities and fixes
Recent CVEs affecting blender, with upgrade or downgrade steps. 6 tracked.
blender has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2022-08-16. Highest priority: CVE-2022-2832 (score 56/100).
- CVE-2022-2833 HIGH 7.5 DOWNGRADE Endless Infinite loop in Blender-thumnailing due to logical bugs.
- CVE-2022-2832 HIGH 7.5 DOWNGRADE A flaw was found in Blender 3.3.0
- CVE-2022-2831 HIGH 7.5 DOWNGRADE A flaw was found in Blender 3.3.0
- CVE-2022-0546 HIGH 7.8 DOWNGRADE DOWNGRADE A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access,
- CVE-2022-0545 HIGH 7.8 UPGRADE MITIGATE An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out
- CVE-2022-0544 MEDIUM 5.5 UPGRADE MITIGATE An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacke
FAQ
How do I fix blender vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is blender being exploited right now?
None of the tracked blender CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which blender CVE should I patch first?
CVE-2022-2832 currently ranks highest (56/100): A flaw was found in Blender 3.3.0.