{"url":"https://vul.hatenadiary.com/entry/2025/09/05/000000_3","width":"100%","author_url":"https://blog.hatena.ne.jp/tanigawa/","blog_title":"TT \u8106\u5f31\u6027 Blog","height":"190","provider_name":"Hatena Blog","title":"Pixar\u306e3D\u8a18\u8ff0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cOpenUSD\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - PoC\u3082\u516c\u958b","version":"1.0","type":"rich","description":"\u3010\u8981\u7d04\u3011 Pixar\u306e3D\u8a18\u8ff0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cOpenUSD\u300d\u306b\u3001Sdf_PathNode\u30e2\u30b8\u30e5\u30fc\u30eb\u306eUse After Free\u8106\u5f31\u6027\uff08GHSA-58p5-r2f6-g2cj\uff09\u304c\u5224\u660e\u3002\u7d30\u5de5\u3055\u308c\u305f.usd\u30d5\u30a1\u30a4\u30eb\u3092\u51e6\u7406\u3059\u308b\u3068\u4efb\u610f\u30b3\u30fc\u30c9\u5b9f\u884c\u306e\u6050\u308c\u304c\u3042\u308a\u3001CVSSv3.1\u30b9\u30b3\u30a2\u306f9.4\u3067Critical\u3068\u8a55\u4fa1\u3002sdffilter\u3084usdcat\u306a\u3069\u8907\u6570\u30c4\u30fc\u30eb\u306b\u5f71\u97ff\u3059\u308b\u30022025\u5e748\u67081\u65e5\u516c\u958b\u306eOpenUSD 25.08\u3067\u4fee\u6b63\u6e08\u307f\u3060\u304c\u3001PoC\u3082\u516c\u958b\u3055\u308c\u3066\u304a\u308a\u3001\u5229\u7528\u8005\u306b\u306f\u901f\u3084\u304b\u306a\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u5bfe\u5fdc\u304c\u5f37\u304f\u63a8\u5968\u3055\u308c\u3066\u3044\u308b\u3002 \u3010\u30cb\u30e5\u30fc\u30b9\u3011 \u25c6Pixar\u306e3D\u8a18\u8ff0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cOpenUSD\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 -\u2026","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fvul.hatenadiary.com%2Fentry%2F2025%2F09%2F05%2F000000_3\" title=\"Pixar\u306e3D\u8a18\u8ff0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af\u300cOpenUSD\u300d\u306b\u6df1\u523b\u306a\u8106\u5f31\u6027 - PoC\u3082\u516c\u958b - TT \u8106\u5f31\u6027 Blog\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","categories":["\u8106\u5f31\u6027: Use After Free","*Exploit Code / PoC","3D\u8a18\u8ff0\u30d5\u30ec\u30fc\u30e0\u30ef\u30fc\u30af: Universal Scene Description / USD"],"published":"2025-09-05 00:00:00","blog_url":"https://vul.hatenadiary.com/","provider_url":"https://hatena.blog","image_url":null,"author_name":"tanigawa"}