CVE-2021-22649
23.02.2021, 04:15
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code.Enginsight
| Vendor | Product | Version |
|---|---|---|
| luxion | keyshot | 𝑥 < 10.1 |
| luxion | keyshot_network_rendering | 𝑥 < 10.1 |
| luxion | keyshot_viewer | 𝑥 < 10.1 |
| luxion | keyvr | 𝑥 < 10.1 |
| siemens | solid_edge_se2020_firmware | * |
| siemens | solid_edge_se2021_firmware | * |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-822 - Untrusted Pointer DereferenceThe program obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer.
- CWE-119 - Improper Restriction of Operations within the Bounds of a Memory BufferThe software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
References