cveboard RSS feed

CVE-2022-42268

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2022
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description (USD) files to customize all aspects of a scene. If a user opens a USD file that contains embedded Python code in one of these applications, the embedded Python code automatically runs with the privileges of the user who opened the file. As a result, an unprivileged remote attacker could craft a USD file containing malicious Python code and persuade a local user to open the file, which may lead to information disclosure, data tampering, and denial of service.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Omniverse Audio2Face

Vendor
NVIDIA
Product
Omniverse Audio2Face
Platforms
Unknown
Default status
unaffected
Omniverse Audio2Face · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.2affectedUnavailableUnavailableUnavailableNone listed

Omniverse Create

Vendor
NVIDIA
Product
Omniverse Create
Platforms
Unknown
Default status
unaffected
Omniverse Create · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.3affectedUnavailableUnavailableUnavailableNone listed

NVIDIA Isaac Sim

Vendor
NVIDIA
Product
NVIDIA Isaac Sim
Platforms
Unknown
Default status
unaffected
NVIDIA Isaac Sim · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.2.0affectedUnavailableUnavailableUnavailableNone listed

Omniverse Machinima

Vendor
NVIDIA
Product
Omniverse Machinima
Platforms
Unknown
Default status
unaffected
Omniverse Machinima · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.3affectedUnavailableUnavailableUnavailableNone listed

Omniverse Code

Vendor
NVIDIA
Product
Omniverse Code
Platforms
Unknown
Default status
unaffected
Omniverse Code · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.3.0affectedUnavailableUnavailableUnavailableNone listed

Omniverse View

Vendor
NVIDIA
Product
Omniverse View
Platforms
Unknown
Default status
unaffected
Omniverse View · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
All versions prior to 2022.2.1affectedUnavailableUnavailableUnavailableNone listed