Integer Overflow Vulnerability in Blender 3D Creation Suite by Blender Foundation

CVE-2017-12081

What is CVE-2017-12081?

An integer overflow vulnerability exists in Blender's legacy Mesh attribute upgrade, specifically in version 2.78c. This flaw can be exploited through a specially crafted .blend file, leading to a buffer overflow. If executed, this may allow attackers to run arbitrary code under the application’s context. Users could be manipulated into opening a malicious file, thereby triggering the vulnerability and compromising their systems.

References