OpenCVE

A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Blender	Blender

Configuration 1 [-]

cpe:2.3:a:blender:blender:3.3.0:alpha:*:*:*:*:*:*

No data.

References

Link	Providers
https://developer.blender.org/T99705
https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2
https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535

History

No history.

MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2022-08-16T19:21:14

Updated: 2024-08-03T00:52:58.915Z

Reserved: 2022-08-16T00:00:00

Link: CVE-2022-2831

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-16T21:15:09.843

Modified: 2024-11-21T07:01:46.297

Link: CVE-2022-2831

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:blender:blender:3.3.0:alpha:*:*:*:*:*:*", "matchCriteriaId": "56F05606-9F20-4A78-9679-855302090DDA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or memory corruption."}, {"lang": "es", "value": "Se ha encontrado un fallo en Blender 3.3.0. Un desbordamiento de interger en source/blender/blendthumb/src/blendthumb_extract.cc puede llevar a la ca\u00edda del programa o a la corrupci\u00f3n de la memoria"}], "id": "CVE-2022-2831", "lastModified": "2024-11-21T07:01:46.297", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-08-16T21:15:09.843", "references": [{"source": "secalert@redhat.com", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://developer.blender.org/T99705"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2"}, {"source": "secalert@redhat.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "https://developer.blender.org/T99705"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.blender.org/rB32df09b2416a6961704eca0fe73534c8c4e715b2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://developer.blender.org/rBb1329d7eaa52a11c73b75d19d20bd8f6d11ac535"}], "sourceIdentifier": "secalert@redhat.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-190"}], "source": "secalert@redhat.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-125"}, {"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}