Description
An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Pixar | Pixar OpenUSD 20.05 , Apple macOS Catalina 10.15.3 | — |
References
- https://talosintelligence.com/vulnerability_reports/TALOS-2020-1125
- 20201215 APPLE-SA-2020-12-14-4 Additional information for APPLE-SA-2020-11-13-1 macOS Big Sur 11.0.1 mailing-list
- 20201215 APPLE-SA-2020-12-14-3 macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave mailing-list
- https://support.apple.com/kb/HT212011