Use-After-Free Vulnerability in Trimble SketchUp SKP File Parsing

CVE-2024-7510

What is CVE-2024-7510?

The security flaw in Trimble SketchUp arises from improper handling during the parsing of SKP files, leading to a use-after-free condition. This vulnerability allows remote attackers to execute arbitrary code by tricking users into visiting malicious webpages or opening compromised SKP files. The vulnerability stems from a failure to validate the existence of objects prior to conducting operations on them, potentially letting attackers execute unintended commands within the context of the affected application.

References