CVE-2020-6155: High severity pixar openusd vulnerability

Published Nov 13, 2020

Updated

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file.

Affected Software

1 affected component

Pixar OpenUSD=20.05

Event History

Nov 13, 2020

CVE Published

via MITRE·02:38 PM

Data Sourced

via MITRE·02:38 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2020-6155?

CVE-2020-6155 is a heap overflow vulnerability in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files.

What is the severity of CVE-2020-6155?

The severity of CVE-2020-6155 is high, with a severity score of 7.8.

How can CVE-2020-6155 be exploited?

CVE-2020-6155 can be exploited by using a specially crafted malformed file that triggers a heap overflow, potentially leading to remote code execution.

What software is affected by CVE-2020-6155?

The affected software is Pixar OpenUSD version 20.05.

How can I fix CVE-2020-6155?

To fix CVE-2020-6155, it is recommended to update the Pixar OpenUSD software to a version that does not have this vulnerability.