Out of Bounds Memory Access in Pixar OpenUSD Product

CVE-2020-13498

What is CVE-2020-13498?

A vulnerability exists in Pixar OpenUSD 20.05 due to improper handling of certain encoded types, which can result in an out of bounds memory access. This can be exploited through specially crafted malformed files, allowing an attacker to disclose sensitive information. Users are at risk if they access these malicious files, which may bypass existing mitigations and facilitate further exploitation.

References