[SECURITY] Fedora 38 Update: usd-22.05b-39.fc38

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

[SECURITY] Fedora 39 Update: usd-23.08-2.fc39

Universal Scene Description USD is a time-sampled scene description for interchange between graphics applications...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer relates to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code using a specially created USDC file...

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer, related to reading data outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing program Adobe Substance 3D Designer lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created USD file...

PT-2023-7696 · Adobe · Dimension

Name of the Vulnerable Software and Affected Versions: Adobe Dimension versions 3.4.10 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. This vulnerability can be exploited by an attacker to bypass mitigations...

The vulnerability of the gf_bt_check_line function (scene_manager/loader_bt.c:408) on the multimedia platform GPAC allows a violator to trigger a service failure.

The vulnerability of the gfbtcheckline function scenemanager/loaderbt.c:408 of the multimedia platform GPAC is related to stack overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2023-5252 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to a stack-based buffer overflow in the gpac multimedia platform, specifically in the gf bt check line function located in scene manager/loader bt.c:408. This overflow can be...

PT-2023-5253 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions prior to 2.3-DEV Description: The issue is related to an out-of-bounds write in the gpac multimedia platform, specifically in the swf def font function located at Scene manager/swf parse.c:1449. This can lead to a buffer overflo...

heap-buffer-overflow in function swf_def_font scene_manager/swf_parse.c:1449

Description Heap-buffer-overflow in MP4Box. Version $ ./bin/gcc/MP4Box -version MP4Box - GPAC version 2.3-DEV-revrelease c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC:...

left shift of negative value in scene_manager/swf_parse.c:213:12

Description left shift of negative value in MP4Box Version $ ./bin/gcc/MP4Box -version MP4Box - GPAC version 2.3-DEV-revrelease c 2000-2023 Telecom Paris distributed under LGPL v2.1+ - http://gpac.io Please cite our work in your research: GPAC Filters: https://doi.org/10.1145/3339825.3394929 GPAC...

GPAC 数字错误漏洞

GPAC is an open source multimedia framework. A numeric error vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from a divide by zero flaw in scenemanager/swfsvg.c, filters/dasher.c, filters/muxisom.c, and scenemanager/swfparse.c. The flaw is caused by a division by zero...

DEBIAN-CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

UBUNTU-CVE-2023-37174

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dumpisomscene function at /mp4box/filedump.c...

PT-2023-25819 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev381-g817a848f6-master Description: A segmentation violation was discovered in the dump isom scene function at /mp4box/filedump.c. This issue affects the specified version of GPAC. Recommendations: For GPAC version...

PT-2023-35830 · Assimp · Assimp

Name of the Vulnerable Software and Affected Versions: Assimp affected versions not specified Description: The issue is related to a heap-use-after-free error. Technical details about the crash include the Assimp::FBXExporter::WriteObjects and Assimp::FBXExporter::ExportBinary functions, as well ...

CVE-2023-25009

A malicious actor may convince a user to open a malicious USD file that may trigger an out-of-bounds write vulnerability which could result in code execution...

Autodesk 3ds Max 缓冲区错误漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max USD version 0.4, which originates from the possibility that an attacker could trick a user into opening a malicious USD file,...

Autodesk 3ds Max 缓冲区错误漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max version 0.4, which stems from the possibility that an attacker could trick a user into opening a malicious USD file, which coul...

Autodesk 3ds Max 缓冲区错误漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max USD plugin version 0.4, which originates from the possibility that an attacker could trick a user into opening a malicious USD...

paris-en-scene.com Cross Site Scripting vulnerability OBB-3322617

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...