The software is designed for scalability and speed as a pipeline connecting various aspects of digital animation process. Apples decision to use USD as the basis of its augmented reality platform makes it a potentially interesting attack surface. The software contains several different vulnerabilities, including some bugs that could corrupt memory in a way that an attacker could carry out additional malicious actions on the victim machine. Cisco Talos worked with Pixar and Apple to ensure that these issues are resolved and that an update is available for affected customers.”]
Source: https://blog.talosintelligence.com/2020/11/vuln-spotlight-pixar-open-usd-nov-2020.html