CVE-2020-6147

Pixar OpenUSD 20.05 vulnerability CVE-2020-6147 involves heap overflow when parsing USDC binary sections with compression. Four compressed sections (FIELDS, FIELDSETS, PATHS, SPECS) can trigger overflows because allocated buffers depend on file-provided counts while read sizes come from the same ...

CVE-2020-6150

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow...

CVE-2020-6150

Four heap overflow CVEs in Pixar OpenUSD 20.05 related to USDC file format decompression of SPECS, FIELDS, FIELDSETS, and PATHS sections. TALOS-2020-1094 details exact code paths (crateFile.cpp) where unvalidated section sizes and mismatched ReadContiguous/decompression buffers allow heap-based o...

PT-2020-18961

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue occurs when the software parses compressed sections in binary USD files, specifically in the USDC file format FIELDS section decompression. Recommendations For Pixar OpenUSD version...

PT-2020-18964

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists due to the decompression of the SPECS section in the USDC file format. Recommendations For Pixar OpenUSD version 20.05, consider avoiding the use of USDC files that may trigg...

PT-2020-18962

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists when the software parses compressed sections in binary USD files, specifically in the USDC file format FIELDSETS section decompression. Recommendations For Pixar OpenUSD...

CVE-2020-6150: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow...