CVE-2020-6149

Name of the Vulnerable Software and Affected Versions Pixar OpenUSD version 20.05

Description A heap overflow issue exists when the software parses compressed sections in binary USD files. This can be triggered by opening a maliciously crafted file in the USDC file format PATHS section. The victim must open an attacker-provided malformed file to exploit this issue.

Recommendations For Pixar OpenUSD version 20.05, consider avoiding the use of compressed sections in binary USD files until a patch is available. As a temporary workaround, restrict the opening of files from untrusted sources to minimize the risk of exploitation.