Approved changes feed: RSS · Atom

cpe:2.3:a:blender:blender:3.0:*:*:*:*:*:*:*

part: a version: 3.0 update: *

VendorBlender (142a225b-38c5-5c46-ad3d-7f1f667da538)
ProductBlender (3aa2bef7-cdc3-5628-9691-fb4c8b92126c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/sonictk/blender purl2cpe 2026-06-01 10:15:24.781168
pkg:deb/debian/blender purl2cpe 2026-06-01 10:15:24.781170
pkg:deb/ubuntu/blender purl2cpe 2026-06-01 10:15:24.781171
pkg:github/blender/blender purl2cpe 2026-06-01 10:15:24.781172
pkg:github/sobotka/blender purl2cpe 2026-06-01 10:15:24.781174
pkg:rpm/fedora/blender purl2cpe 2026-06-01 10:15:24.781175
pkg:rpm/opensuse/blender purl2cpe 2026-06-01 10:15:24.781176
pkg:sourceforge/blender purl2cpe 2026-06-01 10:15:24.781178

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0546 vulnerable 2026-06-08 05:39:10.269963 Details available
A missing bounds check in the image loader used in Blender 3.x and 2.93.8 leads to out-of-bounds heap access, allowing an attacker to cause denial of service, memory corruption or potentially code execution.
Published: 2022-02-24T18:27:17.000Z
Updated: 2024-08-02T23:32:45.994Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.