CVE-2026-1284

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Score

CVSS 3.1 7.8 High

Status

Deferred - 3DS.Information-Security@3ds.com

Published

2026-01-26

Last modified

2026-02-26

Weaknesses

CWE-787

Affected products

• Solidworks Edrawings (Dassault Systmes)

References

• https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1284