https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T12:34:53.093238+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2019-04164 bdu:2019-04164 2026-10-06T12:34:53.200347+00:00 bdu:2019-04164 https://cve.radiocsirt.org/vuln/cnvd-2018-03491 cnvd-2018-03491 2026-10-06T12:34:53.200387+00:00 cnvd-2018-03491 https://cve.radiocsirt.org/vuln/euvd-2026-169020 EUVD-2026-169020 2026-10-06T12:34:53.200402+00:00 EUVD-2026-169020 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2901 fkie_cve-2017-2901 2026-10-06T12:34:53.200413+00:00

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-g5hh-6mqm-f64r GHSA-g5hh-6mqm-f64r 2026-10-06T12:34:53.200479+00:00

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.

 https://cve.radiocsirt.org/vuln/gsd-2017-2901 gsd-2017-2901 2026-10-06T12:34:53.200497+00:00 gsd-2017-2901 https://cve.radiocsirt.org/vuln/ubuntu-cve-2017-2901 UBUNTU-CVE-2017-2901 2026-10-06T12:34:53.200507+00:00

Affected: Ubuntu:16.04:LTS: blender

An exploitable integer overflow exists in the IRIS loading functionality of the Blender open-source 3d creation suite version 2.78c. A specially crafted '.iris' file can cause an integer overflow resulting in a buffer overflow which can allow for code execution under the context of the application. An attacker can convince a user to use the file as an asset via the sequencer in order to trigger this vulnerability.