Out-Of-Bounds Write Vulnerability in Luxion KeyShot

CVE-2025-7222

What is CVE-2025-7222?

A security vulnerability in Luxion KeyShot allows remote attackers to execute arbitrary code by exploiting a flaw in the parsing of 3DM files. This issue arises from insufficient validation of user-provided data, enabling an attacker to write beyond an allocated buffer limit. Exploitation requires user interaction, as the target must visit a malicious webpage or open a compromised file, leading to potential unauthorized control of the affected installation.

References