CVE-2026-119722: Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()

Q: Which Blender versions are affected?

Blender releases before 4.5.15 are affected, as are 5.x releases before 5.2.3. The listed affected software includes Blender packages for Ubuntu and Debian.

Q: What does an attacker need to exploit this issue?

An attacker needs to provide a crafted .blend file and have it opened by a user. The vulnerability has local attack vector, requires no attacker privileges, and requires user interaction.

Q: What could exploitation cause?

A malicious file can cause heap memory overruns during field reads, writes, and pointer dereferences. This may result in crashes or code execution, with high impact to confidentiality, integrity, and availability.

Q: What is the available remediation?

A patch is available. Update to Blender 4.5.15 or later, or to Blender 5.2.3 or later for the 5.x release line.

Published Oct 30, 2026

Updated

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.

Affected Software

12 affected components

debian/blender*

debian/blender<=3.4.1+dfsg-2, <=4.3.2+dfsg-2, <=5.2.2+dfsg-1

Blender Blender<4.5.15

Blender Blender>=5.0.0<5.2.3

ubuntu/blender*

Remediation

Event History

Oct 30, 2026

CVE Published

via MITRE·03:16 PM

Data Sourced

via MITRE·03:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:17 PM

RemedyDescriptionSeverityWeaknessAffected Software

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which Blender versions are affected?

Blender releases before 4.5.15 are affected, as are 5.x releases before 5.2.3. The listed affected software includes Blender packages for Ubuntu and Debian.

What does an attacker need to exploit this issue?

An attacker needs to provide a crafted .blend file and have it opened by a user. The vulnerability has local attack vector, requires no attacker privileges, and requires user interaction.

What could exploitation cause?

A malicious file can cause heap memory overruns during field reads, writes, and pointer dereferences. This may result in crashes or code execution, with high impact to confidentiality, integrity, and availability.

What is the available remediation?

A patch is available. Update to Blender 4.5.15 or later, or to Blender 5.2.3 or later for the 5.x release line.

CVE-2026-119722: Blender before 4.5.15 and 5.x before 5.2.3 Heap Out-of-Bounds Access via read_struct()

Affected Software

Remediation

Patch Available

Patch Available

Patch Available

Event History

Frequently Asked Questions

Which Blender versions are affected?

What does an attacker need to exploit this issue?

What could exploitation cause?

What is the available remediation?

Company

Resources

Contact

Frequently Asked Questions

Which Blender versions are affected?

What does an attacker need to exploit this issue?

What could exploitation cause?

What is the available remediation?