Findings

CVE-2022-2832

A flaw was found in Blender 3.3.0.

Published Aug 16, 2022 · updated Oct 15, 2026

A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 16, 2022 · OSV.dev

    Detected

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

  2. Oct 15, 2026 · OSV.dev

    Fix available

    blender fixed in 3.3.1+dfsg-1; blender fixed in 3.3.1+dfsg-1; blender fixed in 3.3.1+dfsg-1

  3. Oct 15, 2026 · OSV.dev

    Fix available

    blender fixed in 3.3.1+dfsg-1

  4. Oct 15, 2026 · OSV.dev

    Updated

    A flaw was found in Blender 3.3.0. A null pointer dereference exists in source/blender/gpu/opengl/gl_backend.cc that may lead to loss of confidentiality and integrity.

Affected

  • Debian:12 blender0 → 3.3.1+dfsg-1
  • Debian:13 blender0 → 3.3.1+dfsg-1
  • Debian:14 blender0 → 3.3.1+dfsg-1

Sources

References

CVE-2022-2832 · ZeroDay Findings