Remote Code Execution Vulnerability in Luxion KeyShot DAE File Parsing

CVE-2025-2530

What is CVE-2025-2530?

The vulnerability involves the Luxion KeyShot product where uninitialized pointers during the parsing of DAE files can lead to remote code execution. Attackers must trick users into opening a malicious file or visiting a compromised webpage. This flaw allows adversaries to execute arbitrary code within the context of the application, potentially leading to unauthorized actions and data compromise.

References