CVE-2022-2831

Name

CVE-2022-2831

Description

A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.

NVD Severity

medium

Other trackers

CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia

Mailing lists

oss-security, full-disclosure, bugtraq

Exploits

Exploit DB, Metasploit

Forges

GitHub (code, issues), Aports (code, issues)

References

Type	URI
MISC	https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535
MISC	https://developer.blender.org/T99705
MISC	https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2

Match rules

CPE URI	Source package	Min version	Max version
`cpe:2.3:a:blender:blender:3.3.0:alpha::::::`	blender	== None	== 3.3.0

Vulnerable and fixed packages

Source package	Branch	Version	Maintainer	Status