Dassault Systèmes SOLIDWORKS eDrawings Release 2025 CATPRODUCT File Use-After-Free Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A use-after-free vulnerability has been identified in the CATPRODUCT file reading process of SOLIDWORKS eDrawings, specifically in the 2025 release. This vulnerability could enable an attacker to execute arbitrary code by opening a specially crafted CATPRODUCT file.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.

Added: Jul 15, 2025, 3:24 PM
Updated: Jul 15, 2025, 3:24 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
10.0
exploitability
4.4
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.