Aller au contenu
4.3 Moyenne

CVE-2020-13495 An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files

Description

An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an arbitrary out-of-bounds memory access that could lead to the disclosure of sensitive information. This vulnerability could be used to bypass mitigations and aid additional exploitation. To trigger this vulnerability, the victim needs to access an attacker-provided file.

Produits et versions touchés

Produit Versions touchées Corrigé en
macOS Versions non publiées
OpenUSD 20.05 Pas de correctif indiqué
Les 3813 CVE de macOS →
Suivre cette CVE