CVE-2020-13531
8.8
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Summary
A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file can trigger the reuse of a freed memory which can result in further memory corruption and arbitrary code execution. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | Pixar | Pixar OpenUSD 20.08, Apple macOS Apple macOS Catalina 10.15.6 | affected |
Weaknesses
- CWE-416: CWE-416: Use After Free
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.