A crafted .blend file can trigger an out‑of‑bounds read a crash or unintended exposure of adjacent heap memory. The vulnerability arises because the signed short member_index field is used as an array index without bounds validation on the intended array bounds. This results in a SIGSEGV crash or potential leakage of sensitive data from the heap, violating confidentiality and causing service interruption.

Blender, versions 3.0.0 through 5.1.2, is affected. The problem only appears in releases that contain the vulnerable sdna_expand_names() implementation and is fixed in later releases.

The CVSS score of 6.8 indicates medium severity. The EPSS score of < 1% suggests a very low probability that the vulnerability will be exploited in the wild. The vulnerability is not listed in CISA's KEV catalog. The attack vector is most likely a local or user‑supplied file attack; a malicious .blend file opened in the vulnerable application triggers the flaw. No remote code execution is possible, but an attacker could cause a denial of service or read sensitive data fromtrusted file, the required conditions are relatively low, but the lack of a public exploit does not eliminate the risk.