DEBIAN-CVE-2026-119719: Buffer Overflow
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumbdataverticalflip(). Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write when blender-thumbnailer or the Windows shell extension previews it, causing crashes or code execution.
Affected Software
Event History
Frequently Asked Questions
Who is most likely to be exposed?
Systems that generate previews for untrusted .blend files are exposed, including environments where blender-thumbnailer or the Windows shell extension processes files supplied by another party.
What does exploitation require?
An attacker needs to provide a crafted .blend file containing malicious TEST block dimensions and have it previewed by the thumbnail extractor. The provided vector indicates local access and user interaction, with no privileges required.
Which releases address the issue?
The issue affects Blender releases before 4.5.15 and 5.x releases before 5.2.3. Updating to 4.5.15 or later in the 4.5 line, or 5.2.3 or later in the 5.x line, addresses the affected version ranges.