CyberRota Analysis
AI-GeneratedBlender versions 3.0.0 through 5.1.2 are vulnerable to an out-of-bounds read attack that can be exploited by providing a specially crafted .blend file, leading to potential application crashes or unauthorized access to adjacent heap memory. This vulnerability arises from improper bounds validation of the member_index field in the SDNA block, which can result in invalid pointer dereferencing. Users and organizations utilizing affected Blender versions, particularly those in creative industries or software development, should prioritize patching to mitigate the risk of exploitation.
Original NVD Description
Blender 3.0.0 through 5.1.2 contains an out-of-bounds read vulnerability that allows attackers to trigger a crash or read adjacent heap memory by supplying a crafted .blend file with a malicious signed short member_index value in the SDNA block. The member_index field is used as an array index into the sdna->members[] array in sdna_expand_names() without bounds validation, allowing any value outside the allocated range to produce an invalid pointer subsequently passed to strlen(), resulting in a SIGSEGV crash or unintended heap memory disclosure.