CVE-2024-10204 — Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024…

CVE-2024-10204

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025 PUBLISHED

Description (CNA)

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.

Affected (CNA)

Vendor / product	Versions
Dassault Systèmes / eDrawings	affected Release SOLIDWORKS 2024 SP0 through Release SOLIDWORKS 2024 SP5; affected Release SOLIDWORKS 2025 SP0

CWE

CWE-122, CWE-457

References

https://www.3ds.com/vulnerability/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.