CVE-2021-22645

CVE-2021-22645 affects Luxion KeyShot family prior to 10.1, specifically KeyShot, KeyShot Viewer, KeyShot Network Rendering, and KeyVR. The vulnerability arises from .bip documents displaying a “load” command that can reference a remote DLL, allowing the DLL entry point to execute without suffici...

CVE-2021-22647

CVE-2021-22647 affects Luxion KeyShot family: KeyShot, KeyShot Viewer, KeyShot Network Rendering, and KeyVR versions prior to 10.1. The vulnerability is described as multiple out-of-bounds write issues encountered while processing project files, which may allow an attacker to execute arbitrary co...

CVE-2021-22643

CVE-2021-22643 affects Luxion KeyShot family: KeyShot, KeyShot Viewer, KeyShot Network Rendering, and KeyVR prior to version 10.1. The vulnerability is an out-of-bounds read while processing project files, which may allow arbitrary code execution. Red Hat’s entry corroborates the same affected pr...

CVE-2021-22649

Luxion KeyShot family (KeyShot, KeyShot Viewer, KeyShot Network Rendering, KeyVR) prior to 10.1 are affected by multiple NULL pointer dereference issues while processing project files. Root cause: NULL pointer dereferences in project-file handling, potentially allowing arbitrary code execution. A...

CVE-2024-5509

CVE-2024-5509 concerns Luxion KeyShot: a flaw in BIP file parsing enables an attacker to load a library from an unsecured location, leading to remote code execution . The vulnerability arises from an uncontrolled search path element, allowing code execution in the context of the current process. ...

CVE-2024-5508

CVE-2024-5508 affects Luxion KeyShot Viewer. The flaw is in the parsing of KSP files, caused by insufficient validation of user-supplied data, which can trigger an out-of-bounds write and allow remote code execution in the process context. Exploitation requires user interaction (visiting a malici...

CVE-2021-22651

CVE-2021-22651 concerns a path traversal vulnerability in Luxion KeyShot family products (KeyShot, KeyShot Viewer, KeyShot Network Rendering, KeyVR) prior to version 10.1. During extraction of temporary files, an attacker could leverage directory traversal to write arbitrary scripts into automati...

CVE-2024-5506

CVE-2024-5506 refers to a vulnerability in Luxion KeyShot Viewer where the KSP file parser can lead to an out-of-bounds write, enabling remote code execution. The flaw arises from insufficient validation of user-supplied data during KSP parsing, allowing a write past the end of an allocated buffe...

CVE-2024-5507

CVE-2024-5507 (Luxion KeyShot Viewer) : A stack-based buffer overflow in the parsing of KSP files can enable remote code execution in affected KeyShot Viewer installations. The flaw arises from insufficient validation of the length of user-supplied data prior to copying it to a stack-based buffer...