CVE-2022-2832

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-395 CWE-476

Affected software

Vendor	Product	Versions
n/a	Blender	Blender 3.3.0

References

https://developer.blender.org/D15463Patch, Vendor Advisory
https://developer.blender.org/T99706Exploit, Patch, Vendor Advisory
https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6cPatch, Vendor Advisory
https://developer.blender.org/D15463Patch, Vendor Advisory
https://developer.blender.org/T99706Exploit, Patch, Vendor Advisory
https://developer.blender.org/rB00dc7477022acdd969e4d709a235c0be819efa6cPatch, Vendor Advisory

Timeline

Published: Aug 16, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-283207.8This vulnerability allows remote attackers to execute arbitrary code on affected installations of Bentley View 10.16.02.022. User interactio CVE-2022-283219.8The Linux-PAM package before 1.5.2-6.1 for openSUSE Tumbleweed allows authentication bypass for SSH logins. The pam_access.so module doesn't CVE-2022-283237.5An issue was discovered in MediaWiki through 1.37.2. The SecurePoll extension allows a leak because sorting by timestamp is supported,CVE-2022-283277.5The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows a panic via long scalar input.CVE-2022-283287.5A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALA CVE-2022-283296.5A vulnerability has been identified in SCALANCE W1788-1 M12 (All versions < V3.0.0), SCALANCE W1788-2 EEC M12 (All versions < V3.0.0), SCALA CVE-2022-28337.5Endless Infinite loop in Blender-thumnailing due to logical bugs.CVE-2022-283305.3Apache HTTP Server 2.4.53 and earlier on Windows may read beyond bounds when configured to process requests with the mod_isapi module.CVE-2022-283319.8On Windows, Apache Portable Runtime 1.7.0 and earlier may write beyond the end of a stack based buffer in apr_socket_sendv(). This is a resu CVE-2022-283397.8Trend Micro HouseCall for Home Networks version 5.3.1302 and below contains an uncontrolled search patch element vulnerability that could al CVE-2022-28345.3The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which CVE-2022-283457.5The Signal app before 5.34 for iOS allows URI spoofing via RTLO injection. It incorrectly renders RTLO encoded URLs beginning with a non-bre