CVE-2024-9718

Summary

CVE-2024-9718 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can trigger the issue by causing the software to read past the end of an allocated buffer during file parsing. This lack of proper validation leads to out-of-bounds read, enabling attackers to execute arbitrary code in the context of the current process. User interaction, such as visiting a malicious webpage or opening a malicious file, is necessary for exploitation. This vulnerability, originally identified as ZDI-CAN-24102, was reported to the Zero Day Initiative.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.