Approved changes feed: RSS · Atom

cpe:2.3:a:pixar:openusd:20.08:*:*:*:*:*:*:*

part: a version: 20.08 update: *

VendorPixar (7cde345c-abed-501e-b841-f9f221424ed3)
ProductOpenusd (43ab86a4-ed77-5bde-bef9-ec89c5e15872)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/pixaranimationstudios/usd purl2cpe 2026-06-01 10:17:18.125578

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13531 vulnerable 2026-06-08 05:18:00.749341 Details available
HIGH (8.8)
A use-after-free vulnerability exists in a way Pixar OpenUSD 20.08 processes reference paths textual USD files. A specially crafted file can trigger the reuse of a freed memory which can result in further memory corruption and arbitrary code execution. To trigger this vulnerability, the victim needs to open an attacker-provided malformed file.
Published: 2020-12-03T16:23:59.000Z
Updated: 2024-08-04T12:18:18.315Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.