Aller au contenu
en Se connecter
5.5 Moyenne

CVE-2025-53012 MaterialX is an open standard for the exchange of rich material and look-development content across applications and…

Description

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsing file imports, recursion is used to process nested files; however, there is no limit imposed to the depth of files that can be parsed by the library. By building a sufficiently deep chain of MaterialX files one referencing the next, it is possible to crash the process using the MaterialX library via stack exhaustion. This is fixed in version 1.39.3.

Produits et versions touchés

Produit Versions touchées Corrigé en
MaterialX 1.39 1.39.2 → < 1.39.3 1.39.3

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de MaterialX

Les 4 CVE de MaterialX →
CVE-2025-53011 MaterialX is an open standard for the exchange of rich material and look-development content across applications and… 2.0 Faible CVE-2025-53010 MaterialX is an open standard for the exchange of rich material and look-development content across applications and… 2.0 Faible CVE-2025-53009 MaterialX is an open standard for the exchange of rich material and look-development content across applications and… 5.5 Moyenne
Suivre cette CVE