Threats tagged 'ghsa-998f-5325-f384'

Blender versions before 4.5.15 and 5.x before 5.2.3 contain a heap buffer overflow vulnerability caused by an integer overflow in the ptcache_data_alloc() function when reading point cache files. An attacker can supply a crafted point cache file with a large totpoint value alongside a .blend file to cause a crash or execute arbitrary code with the user's privileges.