CVE-2020-6147CWE-122

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files

High · published November 13, 2020

CVSS v3.0
8.8
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01450 · 73.2th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2020-11-13T14:43Z
EPSS history
Timeline
  • 13 NOV 14:43Z
    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files
    cvelistv5