Skip to content
OpenAdvisories
High · 8.8 CVE-2020-13520 EUVD-2020-5767GHSA-q84j-ghmc-vjvj

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A speciall…

Published Dec 11, 2020 · Updated Aug 4, 2024 · Assigned by talos

Description

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.

Affected products

VendorProductAffectedFixed
— Pixar Pixar OpenUSD 20.05 (tested in Apple macOS Catalina 10.15.3) —

References