EUVD-2026-43514

🗓️ 13 Jul 2026 17:44:14Reported by EUVDType

Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or read adjacent heap memory by supplying a crafted .blend file with a malicious signed short member_index value in the SDNA block. T...

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2026-60103	13 Jul 202617:44	–	attackerkb
CVE	CVE-2026-60103	13 Jul 202617:44	–	cve
Cvelist	CVE-2026-60103 Blender 3.0.0 - 5.1.2 Out-of-Bounds Read via crafted .blend SDNA block	13 Jul 202617:44	–	cvelist
NVD	CVE-2026-60103	13 Jul 202618:16	–	nvd
OSV	DEBIAN-CVE-2026-60103	13 Jul 202621:48	–	osv
Positive Technologies	PT-2026-57838	13 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-60103	13 Jul 202619:05	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "07452422-d202-34cf-9eaf-58fd995b4f3f",
        "vendor": {
          "name": "Blender"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "6f4185b8-e88a-3714-b569-ff0526fb3c25",
        "product": {
          "name": "Blender",
          "vendor": {
            "name": "Blender"
          }
        },
        "product_version": "patch: 968972a918b5ed2d534295b639c54449d7de11cd"
      },
      {
        "id": "a7ae91d3-c281-3d22-8cca-89a13a213c90",
        "product": {
          "name": "Blender",
          "vendor": {
            "name": "Blender"
          }
        },
        "product_version": "3.0.0 ≤5.1.2"
      }
    ]
  }
]

Source	Link
projects	www.projects.blender.org/blender/blender/pulls/161273
projects	www.projects.blender.org/blender/blender/commit/968972a918b5ed2d534295b639c54449d7de11cd
vulncheck	www.vulncheck.com/advisories/blender-out-of-bounds-read-via-crafted-blend-sdna-block

13 Jul 2026 17:44Current

6.1Medium risk

Vulners AI Score6.1

CVSS 46.8

CVSS 3.16.1