CVE-2024-7511
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Nov 22, 2024
Updated: Dec 3, 2024
CWE ID 125
Summary
CVE-2024-7511 is an Information Disclosure vulnerability in Trimble SketchUp Pro's handling of PSD files embedded in SKP files. This issue arises due to inadequate validation of user-supplied data, which allows an attacker to read past the end of an allocated buffer. The vulnerability can be exploited only if the target visits a malicious page or opens a malicious file. While this vulnerability does not directly allow code execution, it can be combined with other vulnerabilities to achieve that goal. ZDI-CAN-23000 first reported this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Trimble Inc.