Which versions of Materialx are affected by CVE-2025-53010?

CVE-2025-53010 is a low-severity vulnerability in MaterialX involving null pointer dereference (CVSS 2.0).. A patch is available.

Is there a public PoC exploit available for CVE-2025-53010?

Yes, a public proof-of-concept exploit is available for CVE-2025-53010. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2025-53010?

During next maintenance window: Apply vendor patches when convenient. Verify null pointer dereference controls are in place.

Materialx CVE-2025-53010

Q: What is the CVSS score of CVE-2025-53010?

CVE-2025-53010 has a CVSS 4.0 base score of 2.0 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

LOW

NULL Pointer Dereference (CWE-476)

2025-08-01 security-advisories@github.com

Denial Of Service Null Pointer Dereference Microsoft Materialx

2.0

CVSS 4.0 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

2.0 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:04 vuln.today

Patch released

Mar 28, 2026 - 19:04 nvd

Patch available

PoC Detected

Aug 20, 2025 - 21:24 vuln.today

Public exploit code

CVE Published

Aug 01, 2025 - 18:15 nvd

LOW 2.0

DescriptionGitHub Advisory

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3.

AnalysisAI

MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. Rated low severity (CVSS 2.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as NULL Pointer Dereference (CWE-476), which allows attackers to crash the application by dereferencing a null pointer. MaterialX is an open standard for the exchange of rich material and look-development content across applications and renderers. In version 1.39.2, when parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. An attacker could intentionally crash a target program that uses OpenEXR by sending a malicious MTLX file. This is fixed in version 1.39.3. Affected products include: Linuxfoundation Materialx. Version information: version 1.39.2.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Check pointers before dereferencing. Use static analysis tools to detect null pointer paths.

CVE-2025-53010 vulnerability details – vuln.today

Back