Blender records

36 published records for vendor blender.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 6
With a fix record: 88.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

36 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2009-3850Proof of concept	Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in blender · blender · CWE-94 pre-auth RCE	Critical9.3	—	9.4%	Nov 6, 2009
38Monitor	CVE-2007-1253No exploit	Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assblender · blender · CWE-94 pre-auth RCE	Critical9.3	—	2.8%	Mar 3, 2007
32Monitor	CVE-2005-4470No exploit	Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to causblender · blenloader pre-auth RCE	High7.5	—	5.8%	Dec 21, 2005
32Monitor	CVE-2017-2918No exploit	An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	2.7%	Apr 24, 2018
32Monitor	CVE-2017-12099No exploit	An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.7blender · blender · CWE-190 Memory safety	High7.8	—	2.1%	Apr 24, 2018
32Monitor	CVE-2017-12086No exploit	An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite.blender · blender · CWE-190 Memory safety	High7.8	—	2.0%	Apr 24, 2018
32Monitor	CVE-2017-12082No exploit	An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite.blender · blender · CWE-190 Memory safety	High7.8	—	2.0%	Apr 24, 2018
32Monitor	CVE-2017-12081No exploit	An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	2.0%	Apr 24, 2018
32Monitor	CVE-2017-2903No exploit	An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	2.0%	Apr 24, 2018
32Monitor	CVE-2017-2905No exploit	An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2907No exploit	An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12101No exploit	An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2900No exploit	An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2901No exploit	An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2902No exploit	An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2904No exploit	An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12103No exploit	An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font intblender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12104No exploit	An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12100No exploit	An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2908No exploit	An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2906No exploit	An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-2899No exploit	An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12102No exploit	An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons.blender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
32Monitor	CVE-2017-12105No exploit	An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifierblender · blender · CWE-190 Memory safety	High7.8	—	1.8%	Apr 24, 2018
31Monitor	CVE-2005-3151No exploit	Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.blender · blender pre-auth RCE	High7.5	—	3.4%	Oct 5, 2005

CVE-2009-3850
40Plan
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in
CriticalCVSS 9.3Proof of conceptEPSS 9%
- pre-auth RCE
blender · blenderNov 6, 2009
CVE-2007-1253
38Monitor
Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-ass
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
blender · blenderMar 3, 2007
CVE-2005-4470
32Monitor
Heap-based buffer overflow in the get_bhead function in readfile.c in Blender BlenLoader 2.0 through 2.40pre allows remote attackers to caus
HighCVSS 7.5No exploitEPSS 6%
- pre-auth RCE
blender · blenloaderDec 21, 2005
CVE-2017-2918
32Monitor
An exploitable integer overflow exists in the Image loading functionality of the Blender open-source 3d creation suite v2.78c.
HighCVSS 7.8No exploitEPSS 3%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12099
32Monitor
An exploitable integer overflow exists in the upgrade of the legacy Mesh attribute 'tface' of the Blender open-source 3d creation suite v2.7
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12086
32Monitor
An exploitable integer overflow exists in the 'BKE_mesh_calc_normals_tessface' functionality of the Blender open-source 3d creation suite.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12082
32Monitor
An exploitable integer overflow exists in the 'CustomData' Mesh loading functionality of the Blender open-source 3d creation suite.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12081
32Monitor
An exploitable integer overflow exists in the upgrade of a legacy Mesh attribute of the Blender open-source 3d creation suite v2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2903
32Monitor
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2905
32Monitor
An exploitable integer overflow exists in the bmp loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2907
32Monitor
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12101
32Monitor
An exploitable integer overflow exists in the 'modifier_mdef_compact_influences' functionality of the Blender open-source 3d creation suite
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2900
32Monitor
An exploitable integer overflow exists in the PNG loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2901
32Monitor
An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2902
32Monitor
An exploitable integer overflow exists in the DPX loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2904
32Monitor
An exploitable integer overflow exists in the RADIANCE loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12103
32Monitor
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts text rendered as a font int
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12104
32Monitor
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c draws a Particle object.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12100
32Monitor
An exploitable integer overflow exists in the 'multires_load_old_dm' functionality of the Blender open-source 3d creation suite v2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2908
32Monitor
An exploitable integer overflow exists in the thumbnail functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2906
32Monitor
An exploitable integer overflow exists in the animation playing functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-2899
32Monitor
An exploitable integer overflow exists in the TIFF loading functionality of the Blender open-source 3d creation suite version 2.78c.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12102
32Monitor
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c converts curves to polygons.
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2017-12105
32Monitor
An exploitable integer overflow exists in the way that the Blender open-source 3d creation suite v2.78c applies a particular object modifier
HighCVSS 7.8No exploitEPSS 2%
- Memory safety
blender · blenderApr 24, 2018
CVE-2005-3151
31Monitor
Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.
HighCVSS 7.5No exploitEPSS 3%
- pre-auth RCE
blender · blenderOct 5, 2005