EUVD lists heap buffer overflow in Blender point cache reading (EUVD-2026-114123)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Blender Foundation
- Product
- Blender
- First seen
Summary
The EUVD listing says Blender before 4.5.15 and 5.x before 5.2.3 has a heap buffer overflow in ptcache_data_alloc() when reading point cache files. It gives a CVSS v3.1 score of 8.5/10 and was last updated 2026-10-30.
If you use Blender Foundation
Update Blender to 4.5.15 or 5.2.3 or later
Open point cache files only from trusted sources until updated
Open .blend files only from trusted sources until updated
Avoid opening .blend files from untrusted sources until updated
What the sources say 5
· Mastodon: “Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal.” Source
· Mastodon: “Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability caused by integer overflow in ptcache_data_alloc() when reading point cache files.” Source
· Mastodon: “Blender before 4.5.15 and 5.x before 5.2.3 contains an out-of-bounds read vulnerability in blo_bhead_id_* accessors in https:// readfile.cc that read ID fields without block length checks.” Source
· Mastodon: “Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds read vulnerability in read_file_dna() that reads a GLOB block field without validating its declared length.” Source
· Mastodon: “Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_vertical_flip().” Source