CVE-2020-13494

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A heap overflow vulnerability exists in the Pixar OpenUSD 20.05 parsing of compressed string tokens in binary USD files. A specially crafted malformed file can trigger a heap overflow which can result in out of bounds memory access which could lead to information disclosure. This vulnerability could be used to bypass mitigations and aid further exploitation. To trigger this vulnerability, victim needs to access an attacker-provided malformed file.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-122 CWE-787

Affected software

Vendor	Product	Versions
n/a	Pixar	Pixar OpenUSD 20.05, Apple macOS Catalina 10.15.3

References

https://talosintelligence.com/vulnerability_reports/TALOS-2020-1103Exploit, Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2020-1103Exploit, Third Party Advisory

Timeline

Published: Dec 2, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-134955.5An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles file offsets in binary USD files. A specially crafted malformed f CVE-2020-134966.5An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file CVE-2020-134975.5An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file CVE-2020-134985.5An exploitable vulnerability exists in the way Pixar OpenUSD 20.05 handles parses certain encoded types. A specially crafted malformed file CVE-2020-134999.8An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. S CVE-2020-135010.0A remote code execution vulnerability exists in Windows Domain Name System servers when they fail to properly handle requests, aka 'Windows CVE-2020-135009.8SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. Spec CVE-2020-135019.8An SQL injection vulnerability exists in the CHaD.asmx web service functionality of eDNA Enterprise Data Historian 3.0.1.2/7.5.4989.33053. S CVE-2020-135049.8Parameter AttFilterValue in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests c CVE-2020-135059.8Parameter psClass in ednareporting.asmx is vulnerable to unauthenticated SQL injection attacks. Specially crafted SOAP web requests can caus CVE-2020-135096.5An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A special CVE-2020-13515.5An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka 'Microsoft Grap