Buffer overflow in Dassault Systèmes Edrawings
CVE-2024-10204
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.
Vulnerability class: Buffer Overflow
EPSS: 0.002 (13.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Dassault Systèmes Edrawings — versions Release SOLIDWORKS 2024 SP0, Release SOLIDWORKS 2025 SP0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-10204?
- CVE-2024-10204 is a high-severity vulnerability in Dassault Systèmes Edrawings, classified under Heap-based Buffer Overflow. CVSS score: 7.8/10. Published 2024-11-19.
- How severe is CVE-2024-10204?
- High severity. CVSS v3 base score is 7.8 out of 10.