CVE-2022-0546

概要

参考情報

• developer.blender.org/T94572 · Mitigation
• lists.debian.org/debian-lts-announce/2022/06/msg00021.html · Third Party Advisory
• lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIZADV3AHTWZ2YKEFTVLNK3K4F4KTYLM
• debian.org/security/2022/dsa-5176 · Third Party Advisory

blender のその他の脆弱性

• CVE-2022-2833高 7.5Endless Infinite loop in Blender-thumnailing due to logical bugs.
• CVE-2022-2832高 7.5A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of con…
• CVE-2022-2831高 7.5A flaw was found in Blender 3.3.0. An interger overflow in source/blender/blendthumb/src/blendthumb_extract.cc may lead to program crash or …
• CVE-2022-0545高 7.8An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read vulnerability,…
• CVE-2022-0544中 5.5An integer underflow in the DDS loader of Blender leads to an out-of-bounds read, possibly allowing an attacker to read sensitive data using…