Heap Out-of-Bounds Read Vulnerability in Blender by Blender Foundation

CVE-2026-119720

What is CVE-2026-119720?

Blender versions prior to 4.5.15 and 5.x before 5.2.3 are susceptible to a heap out-of-bounds read vulnerability found in the read_file_dna() function. This security flaw arises when the application fails to properly validate the length of GLOB block fields while reading .blend files. By exploiting this vulnerability, an attacker can craft a malicious .blend file with truncated GLOB block data, leading to potential application crashes when the file is opened.

References