Use-After-Free Code Execution Vulnerability in Luxion KeyShot

CVE-2025-2532

What is CVE-2025-2532?

A vulnerability in Luxion KeyShot's parsing of USDC files could allow remote attackers to execute arbitrary code on affected systems. The flaw arises from improper validation of object existence before operations, leading to a use-after-free condition. To exploit this vulnerability, an attacker must lure the user into visiting a crafted web page or opening a malicious file, which then allows the execution of arbitrary code within the context of the current process. Securing against this type of vulnerability requires user awareness and system updates.

References