CVE-2024-9731

Summary

CVE-2024-9731 is a remote code execution vulnerability affecting Trimble SketchUp Viewer. Malicious SKP files can cause memory corruption during parsing, allowing attackers to execute arbitrary code on affected systems. User interaction, such as visiting a malicious webpage or opening a malicious file, is necessary for exploitation. This issue stems from insufficient validation of user-supplied data, leading to the memory corruption condition. The vulnerability was identified as ZDI-CAN-24145 prior to its public disclosure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.