Threats tagged 'ghsa-27m9-m9xq-2vm6'

A heap buffer overflow vulnerability exists in Blender versions before 4.5.15 and 5.x before 5.2.3. The flaw is caused by a 32-bit integer overflow in the thumb_data_vertical_flip() function used by the blend file thumbnail extractor. Maliciously crafted .blend files with specially designed TEST block dimensions can trigger out-of-bounds writes when previewed by blender-thumbnailer or the Windows shell extension, potentially leading to crashes or arbitrary code execution.