CVE-2024-24122

3.3 lowEPSS 0.7%

Low (3.3) in wondershare edraw. EPSS 0.7% chance of exploitation in the next 30 days.

A remote code execution vulnerability in the project management of Wanxing Technology's Yitu project which allows an attacker to use the exp.adpx file as a zip compressed file to construct a special file name, which can be used to decompress the project file into the system startup folder, restart the system, and automatically execute the constructed attack script.

Severity

CVSS 3.1

3.3 low

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-10-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wondershare:edraw

References

https://gist.github.com/zty-1995/effed155177edd7b22fdf2c082e32984
https://github.com/zty007666/Shenzhen-Yitu-Software-Yitu-Project-Management-Software/tree/0215da8db607824bc9523ce7532f8fc53ba1b40a/Remote%20Code%20Execution%20Vulnerability_02

Check your stack JSON