CVE-2024-10204
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.
Reserved 2024-10-21 | Published 2024-11-19 | Updated 2024-11-19 | Assigner 3DSCWE-122 Heap-based Buffer Overflow
CWE-457: Use of Uninitialized Variable
Mat Powell of Trend Micro Zero Day Initiative
Andrea Micalizzi aka rgod (@rgod777) working with Trend Micro Zero Day Initiative
www.3ds.com/vulnerability/advisories
Support options
