CVE-2024-3298

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

State: Published
Severity: 7.8 High
Published: Apr 4, 2024
Updated: Aug 1, 2024
Reserved: Apr 4, 2024

Read the record on cve.org

Description

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	3DS

Weaknesses

CWE-787 Out-of-bounds Write
CWE-843 Access of Resource Using Incompatible Type ('Type Confusion')

Affected Products

Product	Versions
eDrawingsDassault Systèmes	Release SOLIDWORKS 2023 SP0 through Release SOLIDWORKS 2023 SP5Affected Release SOLIDWORKS 2024 SP0 through Release SOLIDWORKS 2024 SP1Affected

References

https://www.3ds.com/vulnerability/advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.