CVE-2025-2530
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 25, 2025
Updated: Mar 27, 2025
CWE ID 918
Summary
CVE-2025-2530 is a remote code execution vulnerability affecting Luxion KeyShot. Malicious dae files can exploit this flaw, which arises from an uninitialized pointer in the software's parsing process. User interaction, such as visiting a malicious page or opening a malicious file, is necessary for an attacker to successfully execute arbitrary code on affected installations. This vulnerability, classified as ZDI-CAN-23698, can lead to significant security risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.