CVE-2022-0546

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0546
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0546.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-0546
Downstream
DEBIAN (1)
openSUSE (5)
UBUNTU (1)
Related
openSUSE (5)
Published
2022-02-24T18:27:17Z
Modified
2026-08-12T03:51:23Z
Summary
[none]
Details

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

Database specific 
{
    "cna_assigner":  "fedora",
    "cwe_ids":  [
        "CWE-190"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0546.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "Blender 3.x and 2.93.8"
                },
                {
                    "last_affected":  "Blender 3.x and 2.93.8"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}
References

Affected packages

Git / github.com/blender/blender

Affected ranges

Type
GIT
Repo
https://github.com/blender/blender
Events
Introduced
09da7f489ad951eff5fc42f97a8079fafce12a89
Last Affected
f1cca3055776be50f59dd4fb6de3018afb53d52c
Database specific
Show details 
{
    "cpe":  [
        "cpe:2.3:a:blender:blender:2.93.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:blender:blender:3.0:*:*:*:*:*:*:*"
    ],
    "extracted_events":  [
        {
            "introduced":  "2.93.8"
        },
        {
            "last_affected":  "2.93.8"
        },
        {
            "introduced":  "3.0"
        },
        {
            "last_affected":  "3.0"
        }
    ],
    "source":  "CPE_STRING"
}

Affected versions

2.*
2.93.8
3.*
3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0546.json"