high7.8
CVE-2020-13520
An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files.
Impact
An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pixar | Openusd | Version 20.05 |
| Apple | Macos | before 11.1 |