PT-2024-18359 · Dassault Systèmes · Solidworks Desktop

Published

2024-03-22

·

Updated

2024-09-02

·

CVE-2024-1848

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SOLIDWORKS Desktop version 2024
Description Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, DWG, DXF, IPT, JT, SAT, SLDDRW, SLDPRT, STL, STP, X B or X T file.
Recommendations As a temporary workaround, consider limiting file handler access and monitoring local activities until a patch is available from the vendor. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Use of Uninitialized Resource

Type Confusion

Memory Corruption

Use After Free

Heap Based Buffer Overflow

Related Identifiers

CVE-2024-1848

Affected Products

Solidworks Desktop