7.8High
CVE-2026-1333Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
Description
A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.
Weakness (CWE):
CWE-457
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| 3ds | solidworks edrawings | 2025 | |
| Dassault Systèmes | SOLIDWORKS eDrawings | Release SOLIDWORKS Desktop 2025 SP0 – ≤ Release SOLIDWORKS Desktop 2025 SP5, Release SOLIDWORKS Desktop 2026 SP0 |
References and patches
CPE matches (NVD) (8)
cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*