Luxion KeyShot USDC File Parsing Use-After-Free Remote Code Execution Vulnerability

A use-after-free vulnerability has been identified in Luxion KeyShot, specifically within the parsing of USDC files. This flaw allows remote attackers to execute arbitrary code on affected installations. The vulnerability arises from improper validation of object existence before performing operations, enabling code execution in the context of the current process. Exploitation requires user interaction, as the target must open a malicious USDC file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.