CVE-2017-2903

An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.cin' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12082

An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the...

CVE-2017-2900

An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.png' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-12086

An exploitable integer overflow exists in the 'BKEmeshcalcnormalstessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-12102

An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2899

An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.tif' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application...

CVE-2017-2905

CVE-2017-2905 affects Blender 2.78c, where an exploitable integer overflow in the BMP loading functionality can trigger a buffer overflow and execute code. A specially crafted BMP file could be provided as an asset via Blender’s sequencer to a user, leading to potential code execution in the appl...

CVE-2017-12099

Technical details of CVE-2017-12099 are not publicly available in the provided connected documents; monitor for updates.

CVE-2017-2902

CVE-2017-2902 affects Blender 2.78c through an exploitable integer overflow in the DPX loading path (via a crafted .cin file) that can cause a buffer overflow and code execution. The vulnerability is confirmed across multiple advisories linking Blender parsing flaws (CIN, etc.) and is addressed b...

CVE-2017-12105

Blender vulnerability CVE-2017-12105 (and related CVEs) arises from an integer overflow in applying a specific object modifier to a Mesh, leading to a buffer overflow and potential code execution when a crafted .blend is opened or used as a library. Affects Blender versions around v2.78c (and old...

CVE-2017-12086

An exploitable integer overflow exists in the 'BKEmeshcalcnormalstessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the...

CVE-2017-12082

An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite. A .blend file with a specially crafted external data file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the...

PT-2018-3107 · Blender Foundation +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender affected versions not specified Description: The issue is caused by an integer overflow in the 'CustomData' Mesh loading functionality. This can be exploited by a specially crafted .blend file with an external data file, leading to a...

PT-2018-3112 · Blender +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: An integer overflow exists in the way Blender converts text rendered as a font into a curve, allowing for a buffer overflow that can enable code execution under the context of the application. This can be...

PT-2018-3114 · Blender +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: An integer overflow exists in the way Blender applies a particular object modifier to a Mesh, which can be exploited by a specially crafted .blend file. This can cause a buffer overflow, allowing for code...

PT-2018-3109 · Blender +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: The issue is caused by an integer overflow in the 'tface' component of the Blender software. This can be exploited by a remote attacker using a specially crafted .blend file, potentially leading to code...

PT-2018-3108 · Blender Foundation +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender affected versions not specified Description: An integer overflow exists in the 'BKE mesh calc normals tessface' functionality of the Blender open-source 3d creation suite. This issue can be triggered by a specially crafted .blend file...

PT-2018-3106 · Blender Foundation +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: An integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow...

PT-2018-3110 · Blender +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: An integer overflow exists in the 'multires load old dm' functionality, allowing a buffer overflow that can enable code execution under the context of the application. This can be triggered by a specially...

PT-2018-3111 · Blender +1 · Blender +1

Name of the Vulnerable Software and Affected Versions: Blender version 2.78c Description: An integer overflow exists in the 'modifier mdef compact influences' functionality, allowing for a buffer overflow that can enable code execution under the context of the application. This issue can be...