CVE-2026-92211
Description
A flaw was found in OpenUSD. A double-free memory corruption issue occurs during the parsing of binary and packaged crate files (USDC and USDZ) due to improper validation of an object before memory deallocation. An attacker could exploit this vulnerability by tricking a user or application into processing a specially crafted file, potentially leading to arbitrary code execution or a denial of service (DoS).
Statement
Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the products it affects, please see the linked references.
Understanding the Weakness (CWE)
Availability,Integrity
Technical Impact: DoS: Crash, Exit, or Restart
Integrity
Technical Impact: Modify Memory; Modify Application Data
Depending on the type of resource and the expected API behavior, this could lead to memory corruption, data corruption, or execution path corruption.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
