CVE-2022-2832

NameCVE-2022-2832
DescriptionA flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
blender (PTS)buster, buster (security)2.79.b+dfsg0-7+deb10u1vulnerable
bullseye (security), bullseye2.83.5+dfsg-5+deb11u1vulnerable
sid3.2.2+dfsg-3vulnerable

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
blendersource(unstable)(unfixed)unimportant

Notes

https://developer.blender.org/T99706
https://developer.blender.org/D15463
https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c
Debian binary packages not build with WITH_HEADLESS

Search for package or bug name: Reporting problems