CVE-2017-12086: Integer Overflow
An exploitable integer overflow exists in the 'BKEmeshcalcnormalstessface' functionality of the Blender open-source 3d creation suite. A specially crafted .blend file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to open a .blend file in order to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2017-12086?
CVE-2017-12086 is an integer overflow vulnerability in the Blender open-source 3D creation suite.
What is the severity of CVE-2017-12086?
CVE-2017-12086 has a severity rating of 7.8 (high).
How does CVE-2017-12086 affect Blender?
CVE-2017-12086 can allow for code execution under the context of the Blender application.
Which versions of Blender are affected by CVE-2017-12086?
Blender versions 2.79.b, 2.83.5, 3.4.1, and 3.6.2 are affected by CVE-2017-12086.
How can I fix CVE-2017-12086?
To fix CVE-2017-12086, update your Blender installation to version 2.79.b+dfsg0-7+deb10u1, 2.83.5+dfsg-5+deb11u1, 3.4.1+dfsg-2, or 3.6.2+dfsg-2, depending on your operating system.