High · 7.8 CVE-2025-1884 EUVD-2025-13246GHSA-8c5w-f239-2ghg

Use-After-Free vulnerability exists in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Published May 2, 2025 · Updated May 2, 2025 · Assigned by 3DS

Vendor: Dassault Systèmes Product: SOLIDWORKS eDrawings

Description

Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

Affected products

Vendor	Product	Affected	Fixed
Dassault Systèmes	SOLIDWORKS eDrawings	Release SOLIDWORKS Desktop 2025 SP0 – ≤ Release SOLIDWORKS Desktop 2025 SP1.2	—

References

https://www.3ds.com/vulnerability/advisories