CVE-2025-53012
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-08-01

Last updated on: 2025-11-06

Assigner: GitHub, Inc.

Description
MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, nested imports of MaterialX files can lead to a crash via stack memory exhaustion, due to the lack of a limit on the "import chain" depth. When parsing file imports, recursion is used to process nested files; however, there is no limit imposed to the depth of files that can be parsed by the library. By building a sufficiently deep chain of MaterialX files one referencing the next, it is possible to crash the process using the MaterialX library via stack exhaustion. This is fixed in version 1.39.3.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-08-01
Last Modified
2025-11-06
Generated
2026-05-06
AI Q&A
2025-08-01
EPSS Evaluated
2026-05-05
NVD
CVE-2025-53012
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
linuxfoundation materialx 1.39.2
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability in MaterialX version 1.39.2 occurs because the software allows nested imports of MaterialX files without limiting the depth of the import chain. When parsing these nested imports, recursion is used, and without a limit on how deep this recursion can go, an attacker can create a very deep chain of file imports. This causes stack memory exhaustion, leading to a crash of the process using the MaterialX library. The issue is fixed in version 1.39.3.


How can this vulnerability impact me? :

This vulnerability can cause the application or process using the MaterialX library to crash due to stack memory exhaustion. This can lead to denial of service, interrupting normal operations and potentially causing loss of availability for users relying on the affected software.


What immediate steps should I take to mitigate this vulnerability?

Upgrade the MaterialX library to version 1.39.3 or later, where the issue with unlimited import chain depth causing stack exhaustion is fixed.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart