VULNERABILITY INTELLIGENCE
CVE-2024-3298
CVSS score7.8 HIGH
EPSS probability0.32%
CISA KEVNot currently listed
Published2024-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Out-Of-Bounds Write and Type Confusion vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted DWG or DXF. NOTE: this vulnerability was SPLIT from CVE-2024-1847.
Weakness classification
- CWE-787: Out-of-bounds Write
- CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')