[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpQBpHq8JbVUZ0PwUwgg7HkFpvxAI39mCPg-DLH0obd0":3,"g5a-ex:trimble\u002Fsketchup@*":110,"g5a-family:trimble\u002Fsketchup":112},{"success":4,"data":5},true,{"product":6,"versions":31,"topVulnerabilitiesByEpss":38,"kevVulnerabilities":87,"seoMetadata":88,"meta":107},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":30},"trimble","sketchup",6,10,0,"2024-11-22",[14,17,20,23,25,28],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2013",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"22.0.316.0",3,{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},"22.0.354.0",2,{"version":24,"cve_count":22,"kev_count":11,"has_kev":16},"23.1.340",{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},"24.0.484",1,{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},"8.0","Sketchup by Trimble is a technology product with 6 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[32,33,34,35,36,37],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},{"version":24,"cve_count":22,"kev_count":11,"has_kev":16},{"version":26,"cve_count":27,"kev_count":11,"has_kev":16},{"version":29,"cve_count":11,"kev_count":11,"has_kev":16},[39,47,51,58,62,68,72,75,79,83],{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":46},"CVE-2013-3664","Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689) allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers an out-of-bounds stack write.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3662.  NOTE: this issue was SPLIT due to different affected products and codebases (ADT1); CVE-2013-7388 has been assigned to the paintlib issue.","2014-07-01",9.3,"v2","Critical",0.29778,{"cveId":48,"description":49,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":16,"epssScore":50},"CVE-2013-7388","Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP).  NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).",0.13248,{"cveId":52,"description":53,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":57},"CVE-2024-7510","Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19631.",7.8,"v3.1","High",0.00469,{"cveId":59,"description":60,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":61},"CVE-2024-7509","Trimble SketchUp SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-19576.",0.00415,{"cveId":63,"description":64,"publishedDate":12,"cvssScore":65,"cvssVersion":55,"severity":66,"isKev":16,"epssScore":67},"CVE-2024-7511","Trimble SketchUp Pro SKP File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of PSD files embedded in SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-23000.",5.5,"Medium",0.00396,{"cveId":69,"description":70,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":71},"CVE-2024-9712","Trimble SketchUp SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23530.",0.00372,{"cveId":73,"description":74,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":71},"CVE-2024-9713","Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-23885.",{"cveId":76,"description":77,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":78},"CVE-2024-9729","Trimble SketchUp Viewer SKP File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24144.",0.00301,{"cveId":80,"description":81,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":82},"CVE-2024-9731","Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24145.",0.00289,{"cveId":84,"description":85,"publishedDate":12,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":16,"epssScore":86},"CVE-2024-9730","Trimble SketchUp Viewer SKP File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.\n\nThe specific flaw exists within the parsing of SKP files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24146.",0.00269,[],{"title":89,"metaDescription":90,"keywords":91,"structuredData":92},"Sketchup by Trimble - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Sketchup by Trimble covering 6 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Sketchup vulnerabilities, Sketchup security, Sketchup CVE, Trimble Sketchup, Sketchup threat intelligence, Trimble security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":93,"@type":94,"name":95,"description":90,"url":96,"manufacturer":97,"applicationCategory":101,"softwareVersion":102,"mainEntity":103},"https:\u002F\u002Fschema.org","SoftwareApplication","Sketchup","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Ftrimble\u002Fsketchup",{"@type":98,"name":99,"url":100},"Organization","Trimble","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftrimble","Security Software","6 versions tracked",{"@type":104,"name":105,"description":106,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Sketchup Security Vulnerabilities","Security vulnerabilities affecting Sketchup by Trimble",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":108,"apiVersion":109},"2026-10-19T01:59:20.273Z","3.0",{"rows":111,"total":11,"capped":16,"failed":11},[],[113],{"product":114,"cves":115},"sketchup_viewer",17]