Integer Overflow Vulnerability in Blender 2D Image Processing

CVE-2022-0545

What is CVE-2022-0545?

An integer overflow vulnerability in Blender's processing of 2D images can lead to a write-what-where condition and an out-of-bounds read. This weakness permits an attacker to exploit specially crafted image files, potentially leaking sensitive information or executing code within the Blender process. Affected versions are those prior to 2.83.19, 2.93.8, and 3.1.

References