CVE-2025-53009
2 advisories.
PyPI/materialx CVE-2025-53009: medium
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Action: Upgrade materialx to 1.39.3 or later.
pip install materialx==1.39.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.39.2 | 1.39.3 | - |
Fixed versions
| 1.39.3 |
Sources
- osv: GHSA-wx6g-fm6f-w822
- https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-wx6g-fm6f-w822
- https://nvd.nist.gov/vuln/detail/CVE-2025-53009
- https://github.com/AcademySoftwareFoundation/MaterialX/issues/2504
- https://github.com/AcademySoftwareFoundation/MaterialX/pull/2505
- https://github.com/AcademySoftwareFoundation/MaterialX/commit/91ffea0de7bfe7bcd0c399b07f04fc48227055ff
- https://github.com/AcademySoftwareFoundation/MaterialX
- https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
- https://github.com/ShielderSec/poc/tree/main/CVE-2025-53009
CVE-2025-53009 · published · modified · JSON
PyPI/materialx CVE-2025-53009: unknown
MaterialX Stack Overflow via Lack of MTLX XML Parsing Recursion Limit
Action: Upgrade materialx to 1.39.3 or later.
pip install materialx==1.39.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.39.2 | 1.39.3 | - |
Fixed versions
| 1.39.3 |
Sources
- osv: PYSEC-2026-1609
- https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-wx6g-fm6f-w822
- https://nvd.nist.gov/vuln/detail/CVE-2025-53009
- https://github.com/AcademySoftwareFoundation/MaterialX/issues/2504
- https://github.com/AcademySoftwareFoundation/MaterialX/pull/2505
- https://github.com/AcademySoftwareFoundation/MaterialX/commit/91ffea0de7bfe7bcd0c399b07f04fc48227055ff
- https://github.com/AcademySoftwareFoundation/MaterialX
- https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
- https://github.com/ShielderSec/poc/tree/main/CVE-2025-53009
- https://pypi.org/project/materialx
- https://github.com/advisories/GHSA-wx6g-fm6f-w822
CVE-2025-53009 · published · modified · JSON