CVE-2026-119719

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap buffer overflow within the blend file thumbnail extractor. The root cause is a 32-bit integer overflow in the thumb_data_vertical_flip() function. An attacker can craft a malicious .blend file with specific TEST block di...