CVE-2024-11579

Summary

CVE-2024-11579 is a remote code execution vulnerability affecting Luxion KeyShot. Malicious OBJ files can be used to exploit this issue by writing data beyond the allocated buffer during the parsing process. This lack of proper validation creates an out-of-bounds write condition, enabling attackers to execute arbitrary code in the context of the current process. User interaction is necessary for exploitation, as the target must visit a malicious webpage or open a malicious file. The vulnerability was identified as ZDI-CAN-23697 prior to its public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.