VULNERABILITY INTELLIGENCE

CVE-2020-6147

CVSS score7.8 HIGH

EPSS probability1.45%

CISA KEVNot currently listed

Published2020-11-13

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow.

Weakness classification

talos-cna@cisco.com: CWE-122
nvd@nist.gov: CWE-787

Primary references

talos-cna@cisco.com — Mailing List, Third Party Advisory
talos-cna@cisco.com — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory