CVE-2020-6155

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an...

CVE-2020-6155

Pixar OpenUSD 20.05 binary file format vulnerability: two code paths (compressed integer and floating-point arrays) can trigger a heap-based buffer overflow while decoding the reps array in binary USD files. The overflow arises when a size read from the file and a later, larger size are used to a...

CVE-2020-6150

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow...

CVE-2020-6150

Four heap overflow CVEs in Pixar OpenUSD 20.05 related to USDC file format decompression of SPECS, FIELDS, FIELDSETS, and PATHS sections. TALOS-2020-1094 details exact code paths (crateFile.cpp) where unvalidated section sizes and mismatched ReadContiguous/decompression buffers allow heap-based o...

CVE-2020-6150

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow...

CVE-2020-6156: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index...

CVE-2020-6149: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance in USDC file format PATHS section...

PT-2020-18962

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists when the software parses compressed sections in binary USD files, specifically in the USDC file format FIELDSETS section decompression. Recommendations For Pixar OpenUSD...

CVE-2020-6148: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow...

PT-2020-18964

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists due to the decompression of the SPECS section in the USDC file format. Recommendations For Pixar OpenUSD version 20.05, consider avoiding the use of USDC files that may trigg...

CVE-2020-6150: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow...

PT-2020-18961

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue occurs when the software parses compressed sections in binary USD files, specifically in the USDC file format FIELDS section decompression. Recommendations For Pixar OpenUSD version...

CVE-2020-6147: Heap-based Buffer Overflow

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow...

PT-2020-18969

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists when the software parses compressed sections in binary USD files. This can be triggered by opening a malformed file in a specific USDC file format path element token index,...

PT-2020-18968

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists when parsing compressed value rep arrays in binary USD files. This can be triggered by a specially crafted malformed file, potentially leading to remote code execution. The...

CVE-2020-6155: Heap-based Buffer Overflow

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an...

PT-2020-18963

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description A heap overflow issue exists when the software parses compressed sections in binary USD files. This can be triggered by opening a maliciously crafted file in the USDC file format PATHS section. The victi...

Vulnerability Spotlight: Multiple vulnerabilities in Pixar OpenUSD affects some versions of macOS

Aleksandar Nikolic of Cisco Talos discovered these vulnerabilities. Blog by Aleksandar Nikolic and Jon Munshaw. Pixar OpenUSD contains multiple vulnerabilities that attackers could exploit to carry out a variety of malicious actions. OpenUSD stands for “Open Universal Scene Descriptor.” Pixar use...

PT-2020-13601

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05 Description An out-of-bounds memory corruption issue exists due to the way Pixar OpenUSD uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and...

Pixar OpenUSD Binary File Format Token Strings Information Leak Vulnerability

Summary A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This...