Description
Heap-based Buffer Overflow and Uninitialized Variable vulnerabilities exist in the X_B and SAT file reading procedure in eDrawings from Release SOLIDWORKS 2024 through Release SOLIDWORKS 2025. These vulnerabilities could allow an attacker to execute arbitrary code while opening a specially crafted X_B or SAT file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dassault Systèmes | eDrawings | Release SOLIDWORKS 2024 SP0 – ≤ Release SOLIDWORKS 2024 SP5, Release SOLIDWORKS 2025 SP0 | — |