Home

Description

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.

PUBLISHED Reserved 2024-10-21 | Published 2024-11-19 | Updated 2024-11-19 | Assigner 3DS




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-122 Heap-based Buffer Overflow

CWE-457: Use of Uninitialized Variable

Product status

Default status
unaffected

Release SOLIDWORKS 2024 SP0 (custom)
affected

Release SOLIDWORKS 2025 SP0
affected

Credits

Mat Powell of Trend Micro Zero Day Initiative finder

Andrea Micalizzi aka rgod (@rgod777) working with Trend Micro Zero Day Initiative finder

References

www.3ds.com/vulnerability/advisories

cve.org (CVE-2024-10204)

nvd.nist.gov (CVE-2024-10204)

Download JSON