Threat Investigation
Request a demo

CVE-2024-1847

High

Description

Heap-based Buffer Overflow, Memory Corruption, Out-Of-Bounds Read, Out-Of-Bounds Write, Stack-based Buffer Overflow, Type Confusion, Uninitialized Variable, Use-After-Free vulnerabilities exist in the file reading procedure in eDrawings from Release SOLIDWORKS 2023 through Release SOLIDWORKS 2024. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted CATPART, IPT, JT, SAT, STL, STP, X_B or X_T file. NOTE: CVE-2024-3298 and CVE-2024-3299 were SPLIT from this ID.

SeverityHigh
CVSS7.8
Exploit probability—
Product3ds Solidworks
PublishedFeb 28, 2024
First seenFeb 28, 2024
Weakness typeCWE-416Use after freeCWE-787Out-of-bounds writeCWE-125Out-of-bounds readCWE-843CWE-843CWE-908CWE-908

How to fix

Update
  • 3ds solidworks2024 or later

Affected products

ProductAffected versionsFixed in
3ds solidworks2023 ≤ v < 2024, 20242024

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.