CVE-2022-0546

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-0546
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0546.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-0546
Downstream
Related
Published
2022-02-24T18:27:17Z
Modified
2026-07-18T08:59:34.148327526Z
Summary
[none]
Details

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

Database specific 
{
    "cna_assigner": "fedora",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0546.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "Blender 3.x and 2.93.8"
                },
                {
                    "last_affected": "Blender 3.x and 2.93.8"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cwe_ids": [
        "CWE-190"
    ]
}
References

Affected packages

Git / github.com/blender/blender

Affected ranges

Type
GIT
Repo
https://github.com/blender/blender
Events
Introduced
09da7f489ad951eff5fc42f97a8079fafce12a89
Last affected
f1cca3055776be50f59dd4fb6de3018afb53d52c
Database specific 
{
    "cpe": [
        "cpe:2.3:a:blender:blender:2.93.8:*:*:*:*:*:*:*",
        "cpe:2.3:a:blender:blender:3.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "2.93.8"
        },
        {
            "last_affected": "2.93.8"
        },
        {
            "introduced": "3.0"
        },
        {
            "last_affected": "3.0"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

2.*
2.93.8
3.*
3.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-0546.json"