Volerion logoVolerion
Volerion logoVolerion

Trimble SketchUp Uninitialized Variable Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability has been identified in Trimble SketchUp, specifically within the SKP file parsing process. This issue arises from the improper initialization of memory, allowing attackers to execute arbitrary code in the context of the current process. Exploitation requires user interaction, as the target must open a malicious SKP file.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system.

Remediation

Users can upgrade to Trimble SketchUp 2025.0 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.