Arbitrary Out-of-Bounds Memory Access in Pixar OpenUSD by Pixar

CVE-2020-13495

Summary

An exploitable vulnerability in Pixar OpenUSD 20.05 can be triggered by specially crafted binary USD files, where incorrect handling of file offsets leads to arbitrary out-of-bounds memory access. This flaw could potentially allow attackers to disclose sensitive information, as it might bypass existing mitigations and facilitate further exploitation. To exploit this vulnerability, victims must access a maliciously crafted file provided by the attacker.

References