PatchTheCVEpixar vulnerabilities
Recent CVEs affecting pixar products. 16 tracked.
pixar has 16 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-04-18. Highest priority: CVE-2021-33575 (score 61/100).
- CVE-2021-33575 CRITICAL 9.8 UPGRADE The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem
- CVE-2020-6156 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
- CVE-2020-6155 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 while parsing compressed value rep arrays in b
- CVE-2020-6150 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software USDC file format SPECS section d
- CVE-2020-6149 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
- CVE-2020-6148 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
- CVE-2020-6147 HIGH 7.8 DOWNGRADE UPGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
- CVE-2020-13531 HIGH 8.8 DOWNGRADE A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files
- CVE-2020-13524 MEDIUM 5.5 DOWNGRADE UPGRADE An out-of-bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 uses SPECS data from bi
- CVE-2020-13520 HIGH 7.8 DOWNGRADE UPGRADE An out of bounds memory corruption vulnerability exists in the way Pixar OpenUSD 20.05 reconstructs paths from
- CVE-2020-13498 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
- CVE-2020-13497 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
- CVE-2020-13496 MEDIUM 6.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types
- CVE-2020-13495 MEDIUM 5.5 DOWNGRADE An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files
- CVE-2020-13494 MEDIUM 5.5 DOWNGRADE A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary
- CVE-2020-13493 HIGH 7.8 DOWNGRADE A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in bi
FAQ
How do I fix pixar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pixar being exploited right now?
None of the tracked pixar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pixar CVE should I patch first?
CVE-2021-33575 currently ranks highest (61/100): The Pixar ruby-jss gem before 1.6.0 allows remote attackers to execute arbitrary code because of the Plist gem.