Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-6149

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to ope

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
talos

Description

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance in USDC file format PATHS section.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Pixar

  • Pixar OpenUSD 20.05, Apple macOS Catalina 10.15.3affected

References