PT-2025-10015 · Trimble · Trimble Sketchup

·

CVE-2025-2024

·

Publicado

2025-03-06

·

Atualizado

2026-03-10

CVSS v3.1

7.8

Alta

VetorAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Trimble SketchUp (affected versions not specified)
Description The issue is related to an uninitialized variable in the SKP file parsing mechanism, which can lead to remote code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-2024
ZDI-25-111

Produtos afetados

Trimble Sketchup