CVE-2026-119720

Blender versions before 4.5.15 and 5.x before 5.2.3 are vulnerable to a heap out-of-bounds read in the read_file_dna() function. The flaw occurs because the software fails to validate the declared length of a GLOB block field. An attacker can exploit this by providing a crafted .blend file with a...

CVE-2026-119720 Blender before 4.5.15 and 5.x before 5.2.3 Out-of-Bounds Read via GLOB Block

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in readfiledna that reads a GLOB block field without validating its declared length. Attackers can supply a crafted .blend file with a truncated GLOB block that, when opened, triggers the out-of-bounds rea...