Skip to content
OpenAdvisories
High · 7.8 CVE-2024-3299 EUVD-2024-31889GHSA-cxc3-9vgm-w6pp

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

Published Apr 4, 2024 · Updated Aug 1, 2024 · Assigned by 3DS

Description

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Affected products

VendorProductAffectedFixed
Dassault Systèmes eDrawings Release SOLIDWORKS 2023 SP0 – ≤ Release SOLIDWORKS 2023 SP5, Release SOLIDWORKS 2024 SP0 – ≤ Release SOLIDWORKS 2024 SP1 —

References