CVE-2020-6148

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2020-6148

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6148.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2020-6148

Published

2020-11-13T15:15:12.797Z

Modified

2026-08-27T08:40:35.165213Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow.

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094

Affected packages

Git / github.com/PixarAnimationStudios/OpenUSD

Affected ranges

Type

GIT

Repo

https://github.com/PixarAnimationStudios/OpenUSD

Events

Introduced

ebac0a8b6703f4fa1c27115f1f013bb9819662f4

Last affected

ebac0a8b6703f4fa1c27115f1f013bb9819662f4

Database specific

Show details

{
    "source": "CPE_STRING",
    "cpe": "cpe:2.3:a:pixar:openusd:20.05:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "20.05"
        },
        {
            "last_affected": "20.05"
        }
    ]
}

Affected versions

20.*

20.05

v20.*

v20.05

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-6148.json"