CVE-2020-6147
13.11.2020, 15:15
A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.Enginsight
| Vendor | Product | Version |
|---|---|---|
| pixar | openusd | 20.05 |
| apple | ipados | 𝑥 < 14.0 |
| apple | iphone_os | 𝑥 < 14.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-122 - Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
- CWE-787 - Out-of-bounds WriteThe software writes data past the end, or before the beginning, of the intended buffer.