CVE-2025-53012
2 advisories.
PyPI/materialx CVE-2025-53012: medium, EPSS 0.90%
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Action: Upgrade materialx to 1.39.3 or later.
pip install materialx==1.39.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.39.2 | 1.39.3 | - |
Fixed versions
| 1.39.3 |
Sources
- osv: GHSA-qc2h-74x3-4v3w
- https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-qc2h-74x3-4v3w
- https://nvd.nist.gov/vuln/detail/CVE-2025-53012
- https://github.com/AcademySoftwareFoundation/MaterialX/pull/2233/commits/6182c07467297416a30d148ab531d81198686dc5
- https://github.com/AcademySoftwareFoundation/MaterialX
- https://github.com/AcademySoftwareFoundation/MaterialX/blob/main/documents/Specification/MaterialX.Specification.md#mtlx-file-format-definition
- https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
CVE-2025-53012 · published · modified · JSON
PyPI/materialx CVE-2025-53012: unknown, EPSS 0.90%
MaterialX Lack of MTLX Import Depth Limit Leads to DoS (Denial-Of-Service) Via Stack Exhaustion
Action: Upgrade materialx to 1.39.3 or later.
pip install materialx==1.39.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.39.2 | 1.39.3 | - |
Fixed versions
| 1.39.3 |
Sources
- osv: PYSEC-2026-1608
- https://github.com/AcademySoftwareFoundation/MaterialX/security/advisories/GHSA-qc2h-74x3-4v3w
- https://nvd.nist.gov/vuln/detail/CVE-2025-53012
- https://github.com/AcademySoftwareFoundation/MaterialX/pull/2233/commits/6182c07467297416a30d148ab531d81198686dc5
- https://github.com/AcademySoftwareFoundation/MaterialX
- https://github.com/AcademySoftwareFoundation/MaterialX/blob/main/documents/Specification/MaterialX.Specification.md#mtlx-file-format-definition
- https://github.com/AcademySoftwareFoundation/MaterialX/releases/tag/v1.39.3
- https://pypi.org/project/materialx
- https://github.com/advisories/GHSA-qc2h-74x3-4v3w
CVE-2025-53012 · published · modified · JSON