CVE-2023-2763CWE-122CWE-416CWE-787

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

High · published July 12, 2023

CVSS v3.1
7.8
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF file.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00354 · 28.0th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-416 · Use After Free; CWE-787 · Out-of-bounds Write
Published
2023-07-12T07:05Z
EPSS history
Timeline
  • 12 JUL 07:05Z
    Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023
    cvelistv5