Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Luxion

First CVE: Feb 23, 2021Active for: 5 yearsTotal CVEs: 30
40.3
VTI Score
Medium

Luxion develops a focused portfolio of 3D rendering and visualization applications, centered on KeyShot and its variants for professional design and real-time rendering workflows, which occupy a notable position in the graphics-software landscape. The vendor's vulnerability exposure reflects the memory-safety demands of native rendering codebases, with recurring weaknesses in out-of-bounds writes and reads, heap and stack buffer overflows, and use-after-free conditions that are characteristic of complex image-processing and graphics libraries. While the disclosure volume is modest relative to broad platform vendors, the concentration of memory-safety issues across the rendering stack warrants attention from organizations deploying KeyShot in production pipelines and handling untrusted model or scene files. Defenders should prioritize patches for this vendor given the attack surface presented by file parsing in graphics applications; current exploitation activity and severity counts are shown alongside this summary.

FAUCET AI Generated
30
Total CVEs
More Total CVEs than 97% of tracked vendors
2.5
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 90% of tracked vendors
7.7
Avg CVSS Score
Higher Avg CVSS Score than 73% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Luxion over time

Volume of CVEsAvg CVSS Base Score
First CVE
Feb 23, 2021
5 years ago
Most Recent CVE
Jul 21, 2025
368 days ago

Products(4 total)

Top CVEs

Signals from CVEs in this vendor scope (30 CVEs).

30 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-27496HIGH
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied
May 27, 20217.825NONO
CVE-2021-27488HIGH
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied
May 27, 20217.825NONO
CVE-2021-22649HIGH
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.
Feb 23, 20217.825NONO
CVE-2021-27490HIGH
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior are vulnerable to an out-of-bounds read,
May 27, 20217.824NONO
CVE-2021-27494HIGH
Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, Step3dRead, Ug3dReadPsr, Jt3dReadPsr modules in KeyShot Versions v10.1 and prior lack proper validation of user-supplied
May 27, 20217.824NONO
CVE-2021-22651HIGH
When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1,
Feb 23, 20217.824NONO
CVE-2021-22647HIGH
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.
Feb 23, 20217.824NONO
CVE-2021-22645HIGH
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.
Feb 23, 20217.824NONO
CVE-2021-22643HIGH
Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.
Feb 23, 20217.824NONO
CVE-2025-1047HIGH
Luxion KeyShot PVS File Parsing Access of Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte
Apr 23, 20257.823NONO
View all 30 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products30 CVEs
97%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local30 (100.0%)
Network0 (0.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low30 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None0 (0.0%)
Unknown0 (0.0%)
Required30 (100.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None30 (100.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (30 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Luxion.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Luxion — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Luxion's Products

View all 2 CNAs →

Top CWEs