Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Blender 3.3.0: Data Exposure and Corruption via Crash

CVE-2022-2832 · published 4 years ago
Summary

A bug in Blender 3.3.0 could cause the software to crash, potentially exposing sensitive data and corrupting files. This issue affects users who work with Blender, particularly those who rely on the software for critical tasks. To protect yourself, update to the latest version of Blender as soon as possible.

What to do
  • Update debian blender to version 3.3.1+dfsg-1.
Affected software
Ecosystem VendorProductAffected versions
Debian:11 debian blender All versions
Debian:12 debian blender < 3.3.1+dfsg-1
Fix: upgrade to 3.3.1+dfsg-1
Debian:13 debian blender All versions
Debian:14 debian blender All versions
– blender blender 3.3.0
cpe:2.3:a:blender:blender:3.3.0:alpha:*:*:*:*:*:*
Ubuntu:16.04:LTS canonical blender All versions
Original advisory text
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-395Use of NullPointerException Catch to Detect NULL Pointer Dereference
CWE-476NULL Pointer Dereference
Timeline
Published16 Aug 2022
Updated2 Nov 2026
First seen28 Jul 2026
Sources
DEBIAN-CVE-2022-2832 · OSV
CVE-2022-2832 · NVD
UBUNTU-CVE-2022-2832 · OSV
Track software like this
Free during beta