DEBIAN-CVE-2026-119722: High severity debian/blender vulnerability
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in readstruct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.
Affected Software
Event History
Frequently Asked Questions
Which Blender versions need to be updated?
Update Blender versions earlier than 4.5.15, and 5.x versions earlier than 5.2.3. The affected software is Debian's Blender package.
What must an attacker do to trigger the issue?
An attacker must provide a crafted .blend file and have it opened by the target. The vulnerability has local attack vector and requires user interaction, so it is relevant where users import or open untrusted Blender files.
What can be done if an update cannot be applied immediately?
Do not open .blend files from untrusted sources until Blender can be updated. The crafted file can contain short blocks that lead to heap memory overreads, overwrites, and pointer dereferences.