Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-119722

Blender before 4.5.15 and 5.x before 5.2.3 contains a heap out-of-bounds access vulnerability in read_struct() that skips size validation when a .blend file's SDNA struct layout compares equal. Attackers can supply a crafted .blend file with short blocks so field reads, writes, and pointer dereferences overrun heap memory, causing crashes or code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 7.8%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2026-119722


Contact Us

Shodan ® - All rights reserved