CVE-2024-1848

Katalog CVE

CVSS 7.8 · High EPSS 0,27%

Kerentanan Heap-based Buffer Overflow. Skor CVSS 3.1 7.8 (High) menurut 3ds.com.

Deskripsi (NVD)

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in SOLIDWORKS Desktop on Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, DWG, DXF, IPT, JT, SAT, SLDDRW, SLDPRT, STL, STP, X_B or X_T file.

Rincian

Terbit di NVD

22 Maret 2024

Terakhir diubah

17 Juni 2026

Status NVD

Deferred

CVSS 3.1

7.8 (High), sumber 3ds.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-122: Heap-based Buffer Overflow
CWE-125: Out-of-bounds Read
CWE-416: Use After Free
CWE-457: Use of Uninitialized Variable
CWE-787: Out-of-bounds Write
CWE-843: Access of Resource Using Incompatible Type ('Type Confusion')
CWE-908: Use of Uninitialized Resource

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,6% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://www.3ds.com/vulnerability/advisories