CVEvulnerability

CVE-2024-3299

7.8 HIGH Published 2024-04-04 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-04-04
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416, CWE-787, CWE-908

Description

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Related

Weakness · CWE (3)

  • CWE-416 Use After Free weakness
  • CWE-787 Out-of-bounds Write weakness
  • CWE-908 Use of Uninitialized Resource weakness

References