Home

Description

A Use of Uninitialized Variable vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

PUBLISHED Reserved 2026-01-22 | Published 2026-02-16 | Updated 2026-02-18 | Assigner 3DS




HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Problem types

CWE-457 Use of Uninitialized Variable

Product status

Default status
unaffected

Release SOLIDWORKS Desktop 2025 SP0 (custom)
affected

Release SOLIDWORKS Desktop 2026 SP0
affected

References

www.3ds.com/...er/security/security-advisories/cve-2026-1333

cve.org (CVE-2026-1333)

nvd.nist.gov (CVE-2026-1333)

Download JSON