CVE-2024-54095

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A vulnerability has been identified in Solid Edge SE2024 (All versions < V224.0 Update 10). The affected application is vulnerable to integer underflow vulnerability which can be triggered while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-191

Affected software

No affected versions have been published.

Timeline

Published
Dec 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-540965.5Vulnerability of improper access control in the MTP module Impact: Successful exploitation of this vulnerability may affect integrity and acCVE-2024-540977.5Security vulnerability in the HiView module Impact: Successful exploitation of this vulnerability may affect feature implementation and inteCVE-2024-540987.5Service logic error vulnerability in the system service module Impact: Successful exploitation of this vulnerability may affect service inteCVE-2024-540997.1File replacement vulnerability on some devices Impact: Successful exploitation of this vulnerability will affect integrity and confidentialiCVE-2024-54105.4Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01CVE-2024-541007.5Vulnerability of improper access control in the secure input module Impact: Successful exploitation of this vulnerability may cause featuresCVE-2024-541015.5Denial of service (DoS) vulnerability in the installation module Impact: Successful exploitation of this vulnerability will affect availabilCVE-2024-541025.9Race condition vulnerability in the DDR module Impact: Successful exploitation of this vulnerability may affect service confidentiality.CVE-2024-541037.5Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidCVE-2024-541047.5Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service CVE-2024-541057.5Read/Write vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2024-541067.5Null pointer dereference vulnerability in the image decoding module Impact: Successful exploitation of this vulnerability will affect availa
CVE-2024-54095: High severity, CVSS 7.8 | Vulnix