CVE-2024-10204CWE-122CWE-457

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025

High · published November 19, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
12.9
In the wild
Unconfirmed
What it is

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00229 · 12.9th percentile
Weaknesses
CWE-122 · Heap-based Buffer Overflow; CWE-457 · Use of Uninitialized Variable
Published
2024-11-19T13:15Z
EPSS history
Timeline
  • 19 NOV 13:15Z
    Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025
    cvelistv5