CVE-2020-6156
First published: Fri Nov 13 2020(Updated: )
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file in an instance USDC file format path element token index.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pixar OpenUSD | =20.05 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability identifier for this vulnerability?
The vulnerability identifier for this vulnerability is CVE-2020-6156.
What is the affected software?
The affected software is Pixar OpenUSD version 20.05.
How severe is CVE-2020-6156?
CVE-2020-6156 has a severity rating of 7.8 (high).
What is the cause of this vulnerability?
This vulnerability is caused by a heap overflow when parsing compressed sections in binary USD files.
How can this vulnerability be exploited?
This vulnerability can be exploited by opening an attacker-provided malformed file in an instance USDC file format path element token index.
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/severity
- agent/references
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/pixar
- canonical/pixar openusd
- version/pixar openusd/20.05