VULNERABILITY INTELLIGENCE
CVE-2024-3299
CVSS score7.8 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2024-04-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Out-Of-Bounds Write, Use of Uninitialized Resource and Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted SLDDRW or SLDPRT file. NOTE: this vulnerability was SPLIT from CVE-2024-1847.
Weakness classification
- CWE-416: Use After Free
- CWE-787: Out-of-bounds Write
- CWE-908: Use of Uninitialized Resource