7.5

CVE-2022-2832

Exploit
A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blender ≫ Blender Version 3.3.0 Update alpha
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.69% 0.749
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CWE-395 Use of NullPointerException Catch to Detect NULL Pointer Dereference

Catching NullPointerException should not be used as an alternative to programmatic checks to prevent dereferencing a null pointer.

CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://developer.blender.org/D15463
Patch
Vendor Advisory
https://developer.blender.org/T99706
Patch
Vendor Advisory
Exploit
https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6c
Patch
Vendor Advisory