Heap-based Buffer Overflow in Luxion KeyShot allows Remote Code Execution

CVE-2025-2531

What is CVE-2025-2531?

This vulnerability affects Luxion KeyShot during the parsing of DAE files, where inadequate validation of user-supplied data length can lead to a heap-based buffer overflow. Attackers may exploit this flaw by enticing users to open a malicious file or visit a malicious webpage, allowing arbitrary code execution in the context of the current process, which could lead to unauthorized access or system compromise.

References