CVE-2026-121741 Trimble SketchUp use-after-free in SKP file parsing
The SKP file parser operates on an object without first checking that it still exists. A crafted SKP file opened in SketchUp can execute code in the SketchUp process. Coordinated through the Zero Day Initiative as ZDI-26-893 (ZDI-CAN-30421).
References
7.8CVSS 3.1
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
AV:L/
- product
- Trimble SketchUp
- class
- use-after-free in SKP file parsing
- status
- fixed, SketchUp 2027.0
- reported
- 21 May 2026
- published
- 6 Nov 2026
- found by
@r1ngz3ro