NetSight
IP …
medium5.5

CVE-2020-13524

An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files.

Impact

An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.

Affected products

VendorProductAffected versions
PixarOpenusd
Version 20.05
AppleMac Os X
from 10.14.0 before 10.14.6
from 10.15 before 10.15.7
Versions 10.14.6, 10.15.7
AppleMacos
from 11.0 before 11.1

Weakness classification

CWE-119CWE-787

References