PT-2021-2168 · Luxion · Keyshot+3

Rgod

·

Published

2021-02-04

·

Updated

2025-05-01

·

CVE-2021-22649

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Luxion KeyShot versions prior to 10.1 Luxion KeyShot Viewer versions prior to 10.1 Luxion KeyShot Network Rendering versions prior to 10.1 Luxion KeyVR versions prior to 10.1
Description The issue is related to NULL pointer dereference problems while processing project files, which may allow an attacker to execute arbitrary code. This is due to errors in pointer handling, potentially enabling an attacker to exploit the vulnerability.
Recommendations For Luxion KeyShot versions prior to 10.1, update to version 10.1 or later to resolve the issue. For Luxion KeyShot Viewer versions prior to 10.1, update to version 10.1 or later to resolve the issue. For Luxion KeyShot Network Rendering versions prior to 10.1, update to version 10.1 or later to resolve the issue. For Luxion KeyVR versions prior to 10.1, update to version 10.1 or later to resolve the issue.

Fix

Untrusted Pointer Dereference

Buffer Overflow

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

BDU:2021-01069
CVE-2021-22649
ZDI-21-317
ZDI-21-325

Affected Products

Keyshot
Keyshot Network Rendering
Keyshot Viewer
Keyvr