CVE-2024-10204

HIGH

eDrawings SOLIDWORKS 2024-2025 - Heap-based Buffer Overflow and Uninitialized Variable in X_B and SAT File Parsing

Title source: llm

Description

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.

References (1)

Core 1

Core References

Various Sources

https://www.3ds.com/vulnerability/advisories

Scores

CVSS v3 7.8

EPSS 0.0023

EPSS Percentile 13.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-122 CWE-457

Status published

Products (2)

Dassault Systèmes/eDrawings Release SOLIDWORKS 2024 SP0 - Release SOLIDWORKS 2024 SP5

Dassault Systèmes/eDrawings Release SOLIDWORKS 2025 SP0

Published Nov 19, 2024

Tracked Since Feb 18, 2026