CVE-2022-2831: Integer Overflow
A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumbextract.cc may lead to program crash or memory corruption.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.4.1+dfsg-2Fixed in 4.3.2+dfsg-2Fixed in 5.2.2+dfsg-1 - Upgrade
Upgrade
alpine/blenderto a version that resolves this vulnerability.Fixed in 3.3.0-r0 - Upgrade
Upgrade
debian/blenderto a version that resolves this vulnerability.Fixed in 3.2.2+dfsg-1
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-2831.
What is the severity of CVE-2022-2831?
The severity of CVE-2022-2831 is high with a CVSS score of 7.5.
Which software versions are affected by CVE-2022-2831?
The Blender version 3.3.0-alpha is affected by CVE-2022-2831.
What is the impact of CVE-2022-2831?
CVE-2022-2831 can lead to program crashes or memory corruption.
Are there any references available for CVE-2022-2831?
Yes, you can find references for CVE-2022-2831 at the following links: [The first reference](https://developer.blender.org/T99705), [The second reference](https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2), [The third reference](https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535).