PT-2025-18794 · Dassault Systèmes · Solidworks Edrawings

Published 2025-05-02 · Updated 2025-05-13 · CVE-2025-1884

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings version 2025

Description A Use-After-Free issue exists in the SLDPRT file reading procedure, potentially allowing an attacker to execute arbitrary code when opening a specially crafted SLDPRT file.

Recommendations For version 2025, update to a version that includes a fix for this issue, as using a specially crafted SLDPRT file could lead to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-11559

CVE-2025-1884

ZDI-25-285

Affected Products

Solidworks Edrawings

References · 9

• https://zerodayinitiative.com/advisories/ZDI-25-285 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-1884 · Security Note
• https://bdu.fstec.ru/vul/2025-11559 · Security Note
• https://t.me/cvenotify/120882 · Telegram Post
• https://3ds.com/vulnerability/advisories · Note
• https://3ds.com/trust-center/security/security-advisories/CVE-2025-1884 · Note
• https://twitter.com/CVEnew/status/1918568477801234443 · Twitter Post
• https://twitter.com/cybercronai/status/1918671997204132263 · Twitter Post
• https://twitter.com/syedaquib77/status/1922383478005613041 · Twitter Post