Out-of-Bounds Read in Blender File Parsing

Executive Summary

Blender versions before 4.5.15 and 5.x before 5.2.3 have an out-of-bounds read flaw in the blo_bhead_id_* accessors located in readfile.cc. This flaw occurs because the software reads ID fields without verifying block length, allowing attackers to craft .blend files with short ID blocks. When these files are browsed or appended, they trigger heap over-reads that can crash the application or expose sensitive heap memory.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires checking the installed version of Blender. Run 'blender --version' to see if your version is below 4.5.15 or 5.x below 5.2.3. If so, the system is vulnerable. Inspect .blend files from untrusted sources for unusual behavior during opening or appending.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by causing crashes or allowing unauthorized access to sensitive memory contents on your system. If you open or append a malicious .blend file, an attacker could exploit this flaw to read data from memory that should not be accessible, potentially leading to information disclosure or denial-of-service conditions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by potentially exposing sensitive data through memory disclosure. GDPR requires protection of personal data, and HIPAA mandates safeguards for protected health information. A successful exploit could lead to unauthorized data exposure, violating these regulations and resulting in legal or financial penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Update Blender to version 4.5.15 or later, or 5.2.3 or later if using the 5.x branch. Avoid opening or appending .blend files from untrusted sources until patched. Monitor for crashes or memory disclosure when handling .blend files.

Useful 0 Not Useful 0