CVE-2026-1284

Summary

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Affected Software

VendorProductVersion RangeStatus
Dassault SystèmesSOLIDWORKS eDrawingsRelease SOLIDWORKS Desktop 2025 SP0 <= Release SOLIDWORKS Desktop 2025 SP5affected
Dassault SystèmesSOLIDWORKS eDrawingsRelease SOLIDWORKS Desktop 2026 SP0affected

Weaknesses

  • CWE-787: CWE-787 Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References