Out-Of-Bounds Read Vulnerability in Trimble SketchUp Viewer

CVE-2024-9718

What is CVE-2024-9718?

The Trimble SketchUp Viewer contains a vulnerability in its SKP file parsing mechanism, allowing for out-of-bounds read and potentially enabling remote code execution. This flaw arises from insufficient validation of data provided by users, which can result in reading beyond the allocated memory buffer. For exploitation to occur, a user must either access a malicious webpage or open a specially crafted SKP file designed to trigger this vulnerability. This weakness exposes users to risks where attackers could execute arbitrary code under the permissions of the current process, highlighting the importance of secure file handling within software applications.

References