← CVE Intelligence

CVE-2024-3299

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the SLDDRW and SLDPRT file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024 PUBLISHED

Description (CNA)

Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

Affected (CNA)

Vendor / productVersions
Dassault Systèmes / eDrawingsaffected Release SOLIDWORKS 2023 SP0 through Release SOLIDWORKS 2023 SP5; affected Release SOLIDWORKS 2024 SP0 through Release SOLIDWORKS 2024 SP1

CWE

CWE-416, CWE-787, CWE-908

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.