What is CVE-2020-6148?

CVE-2020-6148 is a high-severity vulnerability in Pixar Openusd, classified under Heap-based Buffer Overflow. CVSS score: 7.8/10. Published 2020-11-13.

How severe is CVE-2020-6148?

High severity. CVSS v3 base score is 7.8 out of 10.

Buffer overflow in Pixar Openusd

CVE-2020-6148

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file format FIELDSETS section decompression heap overflow.

Vulnerability class: Buffer Overflow

EPSS: 0.013 (68.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Pixar Openusd — versions 20.05
N/a Pixar — versions Pixar OpenUSD 20.05 , Apple macOS Catalina 10.15.3

Weakness classification (CWE)

CWE-122 — Heap-based Buffer Overflow
CWE-787 — Out-of-bounds Write

References

talos-cna@cisco.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-6148?: CVE-2020-6148 is a high-severity vulnerability in Pixar Openusd, classified under Heap-based Buffer Overflow. CVSS score: 7.8/10. Published 2020-11-13.
How severe is CVE-2020-6148?: High severity. CVSS v3 base score is 7.8 out of 10.