Threats tagged 'ghsa-xgf5-84q3-7qjc'

A heap out-of-bounds read vulnerability exists in Blender versions before 4.5.15 and 5.x before 5.2.3 in the read_file_dna() function. This flaw occurs because the function reads a GLOB block field without validating its declared length. An attacker can craft a malicious .blend file with a truncated GLOB block that triggers the out-of-bounds read, causing Blender to crash.