CVE-2024-10204
High
Description
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.
SeverityHigh
CVSS7.8
Exploit probability—
ProducteDrawings
PublishedNov 19, 2024
First seenNov 19, 2024
Weakness typeCWE-122CWE-122CWE-457CWE-457
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Dassault Systèmes eDrawings | Release SOLIDWORKS 2024 SP0 ≤ v ≤ Release SOLIDWORKS 2024 SP5, Release SOLIDWORKS 2025 SP0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.