UBUNTU-CVE-2026-119718: Buffer Overflow
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcachedataalloc() when reading point cache files. Attackers can supply a crafted point cache file with a large totpoint value alongside a .blend file to crash Blender or execute code as the user.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Users who open a .blend file accompanied by an attacker-crafted point cache file are exposed. Exploitation can crash Blender or execute code with the privileges of the user running Blender.
What does an attacker need to exploit it?
The attacker needs to provide a crafted point cache file containing a large totpoint value alongside a .blend file and persuade a user to open the content. No attacker privileges are required, but user interaction is required.
Which Blender versions are affected?
Blender versions before 4.5.15 are affected, as are 5.x versions before 5.2.3.