CVE-2020-6148CWE-122

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files

High · published November 13, 2020

CVSS v3.0
8.8
EPSS
1%
Percentile
71.2
In the wild
Unconfirmed
What it is

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01347 · 71.2th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2020-11-13T14:43Z
EPSS history
Timeline
  • 13 NOV 14:43Z
    A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files
    cvelistv5