VULNERABILITY INTELLIGENCE
CVE-2009-3850
CVSS score9.3 HIGH
EPSS probability9.98%
CISA KEVNot currently listed
Published2009-11-06
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Blender 2.34, 2.35a, 2.40, and 2.49b allows remote attackers to execute arbitrary code via a .blend file that contains Python statements in the onLoad action of a ScriptLink SDNA.
Weakness classification
- CWE-94: Improper Control of Generation of Code ('Code Injection')