Integer Overflow Vulnerability in Blender Open-Source 3D Creation Suite

CVE-2017-12104

What is CVE-2017-12104?

An integer overflow vulnerability exists in Blender, specifically in version 2.78c, when processing Particle objects. An attacker can exploit this vulnerability through a specially crafted .blend file, leading to a potential buffer overflow that enables the execution of arbitrary code in the context of the application. Users may inadvertently trigger this vulnerability by opening such files or utilizing them as libraries, making it critical to remain vigilant and ensure that installations are updated to safeguard against potential exploitation.

References