KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability

CVE-2024-30375

What is CVE-2024-30375?

The vulnerability in Luxion KeyShot Viewer arises from a security flaw during the parsing of KSP files, leading to a use-after-free condition. This flaw enables remote attackers to execute arbitrary code on the affected installations if a user interacts with a malicious webpage or file. The absence of rigorous checks for object validation prior to executing operations creates a pathway for exploitation, allowing adversaries to manipulate the current process context. Users and organizations are advised to apply necessary precautions and updates to mitigate exposure to this vulnerability.

References