PatchTheCVEkeyshot vulnerabilities and fixes
Recent CVEs affecting keyshot, with upgrade or downgrade steps. 14 tracked.
keyshot has 14 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2025-07-21. Highest priority: CVE-2025-1045 (score 35/100).
- CVE-2025-7222 HIGH 7.8 DOWNGRADE Luxion KeyShot 3DM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2025-2532 HIGH 7.8 DOWNGRADE Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2025-2531 HIGH 7.8 UPGRADE Luxion KeyShot DAE File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-2530 HIGH 7.8 UPGRADE Luxion KeyShot DAE File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability
- CVE-2025-1047 HIGH 7.8 UPGRADE Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability
- CVE-2025-1046 HIGH 7.8 UPGRADE Luxion KeyShot SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2025-1045 HIGH 7.8 UPGRADE Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2025-0412 HIGH 7.8 UPGRADE Luxion KeyShot Viewer KSP File Parsing Memory Corruption Remote Code Execution Vulnerability
- CVE-2024-11581 HIGH 7.8 UPGRADE Luxion KeyShot JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2024-11580 HIGH 7.8 UPGRADE Luxion KeyShot ABC File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11579 HIGH 7.8 UPGRADE Luxion KeyShot OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11578 HIGH 7.8 UPGRADE Luxion KeyShot 3DS File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-11577 HIGH 7.8 UPGRADE Luxion KeyShot SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2024-11576 HIGH 7.8 UPGRADE Luxion KeyShot 3DS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
FAQ
How do I fix keyshot vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is keyshot being exploited right now?
None of the tracked keyshot CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which keyshot CVE should I patch first?
CVE-2025-1045 currently ranks highest (35/100): Luxion KeyShot Viewer KSP File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.