Integer Overflow Vulnerability in Blender 3D Creation Suite

CVE-2017-2900

What is CVE-2017-2900?

An integer overflow exists in the PNG loading functionality of Blender 3D creation suite version 2.78c. When a specially crafted '.png' file is processed, it can trigger the overflow, leading to a buffer overflow that allows for code execution within the application's context. Attackers may exploit this vulnerability by convincing users to load the malicious file as an asset via the sequencer, potentially compromising the integrity and security of the system.

References