CVE-2005-3302: Blender

High severity, CVSS 7.3. EPSS: 3.9% chance of exploitation in the next 30 days.

Eval injection vulnerability in bvh_import.py in Blender 2.36 allows attackers to execute arbitrary Python code via a hierarchy element in a .bvh file, which is supplied to an eval function call.

Affected products

  • Blender Blender: version 2.36 only
  • Debian Debian Linux: version 3.1 only

Published 2005-10-24. Last modified 2026-06-16.