CVE-2021-22643

2021-02-2303:13:36

CWE-125

icscert

www.cve.org

luxion keyshot

keyvr

version 10.1

out-of-bounds read

vulnerability

arbitrary code

project files

AI Score

Confidence

High

EPSS

0.001

Percentile

49.2%

JSON

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.

CNA Affected

[
  {
    "product": "Luxion KeyShot",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 10.1"
      }
    ]
  },
  {
    "product": "Luxion KeyShot Viewer",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 10.1"
      }
    ]
  },
  {
    "product": "Luxion KeyShot Network Rendering",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 10.1"
      }
    ]
  },
  {
    "product": "Luxion KeyVR",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 10.1"
      }
    ]
  }
]