7.8
/ 10
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file.
Basic Information
ID
CVE-2025-6971
Source
3DS
Published
Jul 15, 2025 at 15:02
Modified
Jul 15, 2025 at 15:30
Affected Product
Vendor
Dassault Systèmes
Product
SOLIDWORKS eDrawings
Version
Release SOLIDWORKS Desktop 2025 SP0
Affected Versions
Dassault Systèmes SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2025 SP0