← CVE Intelligence

CVE-2024-3298

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 PUBLISHED

Description (CNA)

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / eDrawingsaffected Release SOLIDWORKS 2023 SP0 through Release SOLIDWORKS 2023 SP5; affected Release SOLIDWORKS 2024 SP0 through Release SOLIDWORKS 2024 SP1

CWE

CWE-787, CWE-843

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.