CVE-2022-0546: Integer Overflow
A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.4.1+dfsg-2Fixed in 4.3.2+dfsg-2Fixed in 5.2.2+dfsg-1 - Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.1.2+dfsg-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-0546?
The severity of CVE-2022-0546 is high.
What is the impact of CVE-2022-0546?
CVE-2022-0546 can lead to denial of service, memory corruption, or potentially code execution.
Which versions of Blender are affected by CVE-2022-0546?
Blender 3.x and 2.93.8 are affected by CVE-2022-0546.
How can an attacker exploit CVE-2022-0546?
An attacker can exploit CVE-2022-0546 by causing out-of-bounds heap access.
Are there any patches or fixes available for CVE-2022-0546?
Yes, patches and fixes for CVE-2022-0546 are available. Please refer to the references for more information.