CVE-2022-0545
An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability, allowing an attacker to leak sensitive information or achieve code execution in the context of the Blender process when a specially crafted image file is loaded. This flaw affects Blender versions prior to 2.83.19, 2.93.8 and 3.1.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-0545 blender Corrigé dans: 2.83.5+dfsg-5+deb11u1
- Ubuntu UBUNTU-CVE-2022-0545 blender
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory debian.org
- web developer.blender.org
- web lists.debian.org