Where
-Infinity
0
EOL
Mar 18, 2025
Support Ends
Mar 18, 2025

End of life: 3/18/2025, End of support: 3/18/2025, Latest version: 4.3.2

First published (updated )
EOL
Mar 18, 2025
Support Ends
Mar 18, 2025

End of life: 3/18/2025, End of support: 3/18/2025, Latest version: 4.3.2

First published (updated )
EOL
Sep 7, 2024
Support Ends
Dec 7, 2022

End of life: 9/7/2024, End of support: 12/7/2022, Latest version: 3.3.21

First published (updated )
EOL
Sep 7, 2024
Support Ends
Dec 7, 2022

End of life: 9/7/2024, End of support: 12/7/2022, Latest version: 3.3.21

First published (updated )
EOL
Jul 16, 2024
Support Ends
Jul 16, 2024

End of life: 7/16/2024, End of support: 7/16/2024, Latest version: 4.1.1

First published (updated )
EOL
Jul 16, 2024
Support Ends
Jul 16, 2024

End of life: 7/16/2024, End of support: 7/16/2024, Latest version: 4.1.1

First published (updated )
EOL
Mar 25, 2024
Support Ends
Mar 25, 2024

End of life: 3/25/2024, End of support: 3/25/2024, Latest version: 4.0.2

First published (updated )
EOL
Mar 25, 2024
Support Ends
Mar 25, 2024

End of life: 3/25/2024, End of support: 3/25/2024, Latest version: 4.0.2

First published (updated )
EOL
Jun 27, 2023
Support Ends
Jun 27, 2023

End of life: 6/27/2023, End of support: 6/27/2023, Latest version: 3.5.1

First published (updated )
EOL
Jun 27, 2023
Support Ends
Jun 27, 2023

End of life: 6/27/2023, End of support: 6/27/2023, Latest version: 3.5.1

First published (updated )
EOL
Mar 29, 2023
Support Ends
Mar 29, 2023

End of life: 3/29/2023, End of support: 3/29/2023, Latest version: 3.4.1

First published (updated )
EOL
Mar 29, 2023
Support Ends
Mar 29, 2023

End of life: 3/29/2023, End of support: 3/29/2023, Latest version: 3.4.1

First published (updated )
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Endless Infinite loop in Blender-thumnailing due to logical bugs.

First published (updated )
Severity
7.5
Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumbextract.cc may lead to program crash or memory corruption.

First published (updated )
Severity
4

source/blender/gpu/opengl/glbackend.cc Null pointer reference https://developer.blender.org/T99706 https://developer.blender.org/D15463 https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c

First published (updated )
Severity
7.5
Null Pointer Dereference
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/glbackend.cc that may lead to loss of confidentiality and integrity.

1 / 2
Source: MITRE
First published (updated )
EOL
Sep 7, 2022
Support Ends
Sep 7, 2022

End of life: 9/7/2022, End of support: 9/7/2022, Latest version: 3.2.2

First published (updated )
EOL
Sep 7, 2022
Support Ends
Sep 7, 2022

End of life: 9/7/2022, End of support: 9/7/2022, Latest version: 3.2.2

First published (updated )
EOL
Jun 8, 2022
Support Ends
Jun 8, 2022

End of life: 6/8/2022, End of support: 6/8/2022, Latest version: 3.1.2

First published (updated )
EOL
Jun 8, 2022
Support Ends
Jun 8, 2022

End of life: 6/8/2022, End of support: 6/8/2022, Latest version: 3.1.2

First published (updated )
Severity
7.8
Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

First published (updated )
Severity
7.8
Integer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.

First published (updated )
Severity
5.5
Integer Underflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using a crafted DDS image file. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.

First published (updated )
EOL
Mar 9, 2022
Support Ends
Mar 9, 2022

End of life: 3/9/2022, End of support: 3/9/2022, Latest version: 3.0.1

First published (updated )
EOL
Mar 9, 2022
Support Ends
Mar 9, 2022

End of life: 3/9/2022, End of support: 3/9/2022, Latest version: 3.0.1

First published (updated )
EOL
Jun 2, 2023
Support Ends
Dec 3, 2021

End of life: 6/2/2023, End of support: 12/3/2021, Latest version: 2.93.18

First published (updated )
EOL
Jun 2, 2023
Support Ends
Dec 3, 2021

End of life: 6/2/2023, End of support: 12/3/2021, Latest version: 2.93.18

First published (updated )
EOL
Jun 1, 2022
Support Ends
Aug 31, 2020

End of life: 6/1/2022, End of support: 8/31/2020, Latest version: 2.83.20

First published (updated )
EOL
Jun 1, 2022
Support Ends
Aug 31, 2020

End of life: 6/1/2022, End of support: 8/31/2020, Latest version: 2.83.20

First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203