VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026

CVE-2020-13520

CVE-2020-13520

Description

An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed file can trigger an out of bounds memory modification which can result in remote code execution. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Pixar/OpenUSD3 versions
    cpe:2.3:a:pixar:openusd:20.05:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:pixar:openusd:20.05:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 20.05
  • Apple Inc./macOS
    cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*
    Range: <11.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.