cvelist/2020/6xxx/CVE-2020-6147.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2020-6147",
        "ASSIGNER": "talos-cna@cisco.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "n/a",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Pixar",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "Pixar OpenUSD 20.05 , Apple macOS Catalina 10.15.3"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "heap overflow"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "refsource": "MISC",
                "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094",
                "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1094"
            },
            {
                "refsource": "FULLDISC",
                "name": "20201115 APPLE-SA-2020-11-13-3 Additional information for APPLE-SA-2020-09-16-1 iOS 14.0 and iPadOS 14.0",
                "url": "http://seclists.org/fulldisclosure/2020/Nov/20"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A heap overflow vulnerability exists in Pixar OpenUSD 20.05 when the software parses compressed sections in binary USD files. This instance exists in the USDC file format FIELDS section decompression heap overflow."
            }
        ]
    }
}