CVSS: 8.8EPSS: 3%CPEs: 1EXPL: 1CVE-2020-6155
https://notcve.org/view.php?id=CVE-2020-6155
13 Nov 2020 — A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed file can trigger a heap overflow, which can result in remote code execution. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Se presenta una vulnerabilidad de desbordamiento de la pila en Pixar OpenUSD versión 20.05, mientras se analizan las matrices de repeticiones de valores comprimidos en archivos binari... • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1101 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2020-6150
https://notcve.org/view.php?id=CVE-2020-6150
13 Nov 2020 — A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow. Se presenta una vulnerabilidad de desbordamiento de la pila en Pixar OpenUSD versión 20.05, cuando el archivo USDC del software formatea un desbordamiento de la pila de descompresión de la sección SPECS • https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 1%CPEs: 2EXPL: 1CVE-2020-13520 – Apple Security Advisory 2020-11-13-3
https://notcve.org/view.php?id=CVE-2020-13520
13 Nov 2020 — An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file. Se presenta una vulnerabilidad de corrupción de memoria fuera de límites en la forma en que Pixar OpenUSD versión 20.05, reconstruye rutas a partir de archivos USD b... • https://support.apple.com/kb/HT212011 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 1CVE-2020-6147 – Apple Security Advisory 2020-11-13-3
https://notcve.org/view.php?id=CVE-2020-6147
13 Nov 2020 — A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow. Se presenta una vulnerabilidad de desbordamiento de la pila en Pixar OpenUSD versión 20.05, cuando el software analiza secciones comprimidas en archivos binarios USD. Esta instancia se presenta en el desbordamiento de la pila de descompresión de la sección FIELDS de formato de archivo USDC U... • http://seclists.org/fulldisclosure/2020/Nov/20 • CWE-122: Heap-based Buffer Overflow CWE-787: Out-of-bounds Write •
CVSS: 6.3EPSS: 0%CPEs: 19EXPL: 1CVE-2020-13524 – Apple Security Advisory 2020-12-14-3
https://notcve.org/view.php?id=CVE-2020-13524
09 Nov 2020 — An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed file can trigger an out-of-bounds memory access and modification which results in memory corruption. To trigger this vulnerability, the victim needs to access an attacker-provided malformed file. Se presenta una vulnerabilidad de corrupción de memoria fuera de límites en la forma en que Pixar OpenUSD versión 20.05, usa datos SPECS de archivos binarios US... • http://seclists.org/fulldisclosure/2020/Dec/26 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •