CVE-2025-53010: falha de baixa gravidade em AcademySoftwareFoundation MaterialX
MaterialX's unchecked nodeGraph->getOutput return is vulnerable to NULL Pointer Dereference
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2epss 0.5%
MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
AcademySoftwareFoundation · MaterialXCVEs relacionadas — AcademySoftwareFoundation MaterialX
No mesmo produto, das mais perigosas para as menos.
CVE-2025-53012MEDIUMMaterialX's Lack of Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack ExhaustionEPSS 1.0%CVE-2025-53009MEDIUMMaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion LimitEPSS 0.7%CVE-2025-53011LOWMaterialX is Vulnerable to NULL Pointer Dereference due to Unchecked implGraphOutputEPSS 0.6%