openusd vulnerabilities and fixes

Recent CVEs affecting openusd, with upgrade or downgrade steps. 15 tracked.

openusd has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-04-18. Highest priority: CVE-2020-13531 (score 57/100).

• CVE-2020-6156 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
• CVE-2020-6155 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in b
• CVE-2020-6150 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section d
• CVE-2020-6149 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
• CVE-2020-6148 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
• CVE-2020-6147 HIGH 7.8 DOWNGRADE UPGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
• CVE-2020-13531 HIGH 8.8 DOWNGRADE A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files
• CVE-2020-13524 MEDIUM 5.5 DOWNGRADE UPGRADE An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from bi
• CVE-2020-13520 HIGH 7.8 DOWNGRADE UPGRADE An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from
• CVE-2020-13498 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
• CVE-2020-13497 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
• CVE-2020-13496 MEDIUM 6.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
• CVE-2020-13495 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files
• CVE-2020-13494 MEDIUM 5.5 DOWNGRADE A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary
• CVE-2020-13493 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi

FAQ

How do I fix openusd vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is openusd being exploited right now?

None of the tracked openusd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which openusd CVE should I patch first?

CVE-2020-13531 currently ranks highest (57/100): A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files.

RSS feed for openusd · ← Back to latest CVEs