CVE-2025-6971

Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file.

Score

CVSS 3.1 7.8 High

Status

Deferred - 3DS.Information-Security@3ds.com

Published

2025-07-15

Last modified

2025-07-15

Weaknesses

CWE-416

Affected products

• Solidworks Edrawings (Dassault Systmes)

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6971