CVE-2024-3298CWE-787CWE-843

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024

High · published April 4, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF. NOTE: this vulnerability was SPLIT from CVE-2024-1847.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weaknesses
CWE-787 · Out-of-bounds Write; CWE-843 · Access of Resource Using Incompatible Type ('Type Confusion')
Published
2024-04-04T15:11Z
EPSS history
Timeline
  • 04 APR 15:11Z
    Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the DWG and DXF file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024
    cvelistv5