CVE-2024-10204: Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-11-19 · updated 2026-06-17
Weakness: CWE-122

Description

Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.

Affected products

Dassault Edrawings: from solidworks_2024_sp0 through solidworks_2024_sp5; solidworks_2025_sp0

References

https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2024-10204 or the next vulnerability affects your stack