Use-After-Free

usdcore is vulnerable to a Use-After-Free. The vulnerability is due to multi-threaded deletion of SdfPrimPathNode objects accessing freed memory, allowing an attacker to exploit a crafted .usd file to cause crashes or achieve remote code execution...

Use After Free

Overview usd-core is a Pixar's Universal Scene Description Affected versions of this package are vulnerable to Use After Free. Affected versions of the usd-core package are vulnerable to Use-After-Free due to unsynchronised destruction of SdfPrimPathNode objects in the SdfPathNode module that...