Remote Code Execution Vulnerability in Luxion KeyShot PVS File Parsing

CVE-2025-1047

Summary

A vulnerability exists in Luxion KeyShot due to improper initialization of pointers during the parsing of PVS files. This flaw allows remote attackers to execute arbitrary code on compromised installations. Exploitation requires user interaction, as the target must either visit a malicious webpage or open a malicious file. Successful exploitation could lead to unauthorized actions within the affected process context.

References