CVE-2021-22643

Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.

• CWE-125
• CWE-125

• https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-316/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-319/Third Party Advisory, VDB Entry
• https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdfThird Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01Third Party Advisory, US Government Resource
• https://www.zerodayinitiative.com/advisories/ZDI-21-316/Third Party Advisory, VDB Entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-319/Third Party Advisory, VDB Entry

Published

Feb 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-22638Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a…7.8
• CVE-2021-22639An uninitialized pointer issue has been identified in the wa…7.8
• CVE-2021-2264Vulnerability in the Oracle VM VirtualBox product of Oracle …8.4
• CVE-2021-22640An attacker can decrypt the Ovarro TBox login password by co…9.8
• CVE-2021-22641A heap-based buffer overflow issue has been identified in th…7.8
• CVE-2021-22642An attacker could use specially crafted invalid Modbus frame…7.5
• CVE-2021-22644Ovarro TBox TWinSoft uses the custom hardcoded user “TWinSof…9.8
• CVE-2021-22645Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8
• CVE-2021-22646The “ipk” package containing the configuration created by TW…9.8
• CVE-2021-22647Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8
• CVE-2021-22648Ovarro TBox proprietary Modbus file access functions allow a…9.8
• CVE-2021-22649Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer…7.8