Heap Buffer Overflow in Blender Affects User Security

CVE-2026-119718

What is CVE-2026-119718?

A heap buffer overflow vulnerability exists in Blender versions prior to 4.5.15 and 5.x prior to 5.2.3 due to integer overflow in the ptcache_data_alloc() function when handling point cache files. This flaw allows attackers to craft malicious point cache files with an excessively large totpoint value, potentially leading to application crashes or unauthorized code execution in the context of the user running Blender.

References