Blender versions prior to 4.5.15 and 5.x prior to 5.2.3 contain a heap out‑of‑bounds read in the read_file_dna() function. The function reads a field of a GLOB block without validating the declared length, which allows a crafted .blend file with a truncated GLOB block to trigger the read and cause Blender to crash. The vulnerability does not provide code execution or information disclosure; it results in a local denial of service when the file is opened.

The affected software is Blender from the Blender Foundation. Vulnerable releases are those earlier than 4.5.15 and all 5.x releases earlier than 5.2.3.

The CVSS score of 6.8 classifies this issue as medium severity. No EPSS score is available, and the vulnerability is not listed in CISA KEV. Exploitation requires an attacker to supply a malicious .blend file containing a truncated GLOB block; opening such a file will trigger the out‑of‑bounds read and crash the application. The attack vector is local, dependent on the user opening the crafted file, and does not enable remote code execution.