Threats tagged 'ghsa-xrhr-77c8-rr8q'

A heap out-of-bounds access vulnerability exists in Blender versions before 4.5.15 and 5.x before 5.2.3 in the read_struct() function. This flaw occurs because size validation is skipped when a .blend file's SDNA struct layout compares equal, allowing crafted .blend files with short blocks to cause heap memory overruns. Such overruns can lead to application crashes or potentially arbitrary code execution.