CVE-2024-3299

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

State: Published
Severity: 7.8 High
Published: Apr 4, 2024
Updated: Aug 1, 2024
Reserved: Apr 4, 2024

Read the record on cve.org

Description

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	3DS

Weaknesses

CWE-416 Use After Free
CWE-787 Out-of-bounds Write
CWE-908 Use of Uninitialized Resource

Affected Products

Product	Versions
eDrawingsDassault Systèmes	Release SOLIDWORKS 2023 SP0 through Release SOLIDWORKS 2023 SP5Affected Release SOLIDWORKS 2024 SP0 through Release SOLIDWORKS 2024 SP1Affected

References

https://www.3ds.com/vulnerability/advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.