Vulnerability · Published Oct 30, 2026 · Assigned by VulnCheck
CVE-2026-119719Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction
High 7.8
In plain English
A high-severity integer overflow in Blender from Blender Foundation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 5% of all known vulnerabilities).
Official description
Blender before 4.5.15 and 5.x before 5.2.3 contains a heap buffer overflow vulnerability in the blend file thumbnail extractor caused by 32-bit integer overflow in thumb_data_vertical_flip(). Attackers can craft a .blend file with malicious TEST block dimensions that trigger an out-of-bounds write when blender-thumbnailer or the Windows shell extension previews it, causing crashes or code execution.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | blender | no fix listed | DEBIAN-CVE-2026-119719 |
| Debian:13 | blender | no fix listed | DEBIAN-CVE-2026-119719 |
| Ubuntu:22.04:LTS | blender | no fix listed | UBUNTU-CVE-2026-119719 |
| Ubuntu:24.04:LTS | blender | no fix listed | UBUNTU-CVE-2026-119719 |
| Ubuntu:26.04:LTS | blender | no fix listed | UBUNTU-CVE-2026-119719 |
| Ubuntu:26.10 | blender | no fix listed | UBUNTU-CVE-2026-119719 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Blender Foundation | Blender | 0 – before 4.5.155.0.0 – before 5.2.3 |
Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
References
- https://projects.blender.org/blender/blender/pulls/164279 patch
- https://projects.blender.org/blender/blender/commit/d723c68112d216099c9b24dab5c8440bab7add08 patch
- https://projects.blender.org/blender/blender/commit/71c10a0217d5e331b215b76773ad23b64974bd97 patch
- https://projects.blender.org/blender/blender product
- VulnCheck Advisory: Blender before 4.5.15 and 5.x before 5.2.3 Heap Buffer Overflow via Thumbnail Extraction third-party-advisory