CVE-2022-0545

Katalog CVE

CVSS 7.8 · High EPSS 1,2%

Kerentanan Integer Overflow or Wraparound pada blender, debian linux. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.

Rincian

Terbit di NVD

24 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://developer.blender.org/T94629 issue tracking · patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html mailing list · advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5176 advisory pihak ketiga