KeyShot Viewer KSP File Parsing Use-After-Free Remote Code Execution Vulnerability

CVE-2024-30375

What is CVE-2024-30375?

The vulnerability in Luxion KeyShot Viewer arises from a security flaw during the parsing of KSP files, leading to a use-after-free condition. This flaw enables remote attackers to execute arbitrary code on the affected installations if a user interacts with a malicious webpage or file. The absence of rigorous checks for object validation prior to executing operations creates a pathway for exploitation, allowing adversaries to manipulate the current process context. Users and organizations are advised to apply necessary precautions and updates to mitigate exposure to this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References