CVE-2022-0546

Katalog CVE

CVSS 7.8 · High EPSS 1,2%

Kerentanan Integer Overflow or Wraparound pada blender, fedoraproject extra packages for enterprise linux +2 lainnya. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.

Rincian

Terbit di NVD

24 Februari 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://developer.blender.org/T94572 mitigasi · patch · advisory vendor
• https://lists.debian.org/debian-lts-announce/2022/06/msg00021.html advisory pihak ketiga
• https://www.debian.org/security/2022/dsa-5176 advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIZADV3AHTWZ2...