CVE-2020-13520

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05

Description A memory corruption issue exists due to the way Pixar OpenUSD reconstructs paths from binary USD files. This can be triggered by a specially crafted malformed file, potentially leading to remote code execution. The victim must access an attacker-provided malformed file to trigger this issue.

Recommendations For Pixar OpenUSD version 20.05, consider avoiding the use of binary USD files from untrusted sources until a patch is available. As a temporary workaround, restrict access to files that could potentially trigger this issue to minimize the risk of exploitation.