7.8High
CVE-2026-1335Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
Description
An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.
Weakness (CWE):
CWE-787
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| 3ds | solidworks edrawings | 2025 | |
| Dassault Systèmes | SOLIDWORKS eDrawings | Release SOLIDWORKS Desktop 2025 SP0 – ≤ Release SOLIDWORKS Desktop 2025 SP5, Release SOLIDWORKS Desktop 2026 SP0 |
References and patches
CPE matches (NVD) (8)
cpe:2.3:a:3ds:solidworks_edrawings:2025:-:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp1.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp2.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp3.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp4.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2025:sp5.0:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2026:-:*:*:*:*:*:*cpe:2.3:a:3ds:solidworks_edrawings:2026:sp1.1:*:*:*:*:*:*