Pixar

22 CVEs across 4 Pixar products. Browse Pixar vulnerabilities, severities, and proof-of-concept exploits.

Pixar products with known CVEs

ProductCVEs
Openusd15
Renderman5
Ruby-Jss1
Tractor1
Pixar CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2020-13495Medium5.52022-04-18An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed file can trigger an…
CVE-2021-33575Critical9.82021-05-25The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem's documented behavior of using Marshal.load duri…
CVE-2020-13520High7.82020-12-11An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from binary USD files. A specially crafted malformed…
CVE-2020-13524Medium5.52020-12-03An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from binary USD files. A specially crafted malformed fil…
CVE-2020-13531High8.82020-12-03A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file can trigger the reuse…
CVE-2020-13498Medium5.52020-12-02An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbi…
CVE-2020-13497Medium5.52020-12-02An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbi…
CVE-2020-13496Medium6.52020-12-02An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file can trigger an arbi…
CVE-2020-13494Medium5.52020-12-02A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can…
CVE-2020-13493High7.82020-12-02A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. A specially crafted USDC file for…
CVE-2020-6156High7.82020-11-13A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, th…
CVE-2020-6155High7.82020-11-13A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in binary USD files. A specially crafted malformed fi…
CVE-2020-6150High7.82020-11-13A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section decompression heap overflow.
CVE-2020-6149High7.82020-11-13A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. To trigger this vulnerability, th…
CVE-2020-6148High7.82020-11-13A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. An instance exists in USDC file f…
CVE-2020-6147High7.82020-11-13A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC…
CVE-2019-5015High7.82019-03-08A local privilege escalation vulnerability exists in the Mac OS X version of Pixar Renderman 22.3.0's Install Helper helper tool. A user with local access can…
CVE-2018-4055Medium5.52019-03-08A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce…
CVE-2018-4054High7.82019-03-08A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local acce…
CVE-2018-5411Medium5.42018-12-13Pixar's Tractor software, versions 2.2 and earlier, contain a stored cross-site scripting vulnerability in the field that allows a user to add a note to an exi…
CVE-2018-3841High7.52018-06-26A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x69). The vulnerability is present in the parsing of a network packet…
CVE-2018-3840High7.52018-06-26A denial-of-service vulnerability exists in the Pixar Renderman IT Display Service 21.6 (0x67). The vulnerability is present in the parsing of a network packet…