CVE-2020-13494

Pixar OpenUSD 20.05 contains a heap overflow in parsing compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap-based buffer overflow, leading to out-of-bounds memory access and potential information disclosure. Exploitation requires the victim to open ...