CVE-2010-0280: Google Sketchup

High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days.

Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c.

Affected products

• Google Google Sketchup: version 7.0 only; version 7.0.10247 only; version 7.1.4871 only; version 7.1.6087 only
• Jan Eric Krprianidis LIB3DS: version 1.0 only

Published 2010-01-15. Last modified 2026-06-16.