SOLIDWORKS eDrawings Uninitialized Variable Vulnerability in JT File Reading Allowing Arbitrary Code Execution
Vulnerability
A vulnerability allowing the execution of arbitrary code has been identified in SOLIDWORKS eDrawings, specifically in the JT file reading process of the 2025 release. This issue arises from the use of an uninitialized variable, which could be exploited by opening a specially crafted JT file.
Impact
Exploitation of this vulnerability could lead to arbitrary code execution on the affected system.
Remediation
Users can refer to the 3DS Support Knowledge Base for remediation information.
Added: Jul 15, 2025, 3:20 PM
Updated: Jul 15, 2025, 3:20 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
10.0exploitability
4.4remediation
0.0relevance
0.3threat
0.0urgency
2.9incentive
0.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.