PT-2025-29570 · Dassault Systèmes · Solidworks Edrawings+1

Published 2025-07-15 · Updated 2025-07-20 · CVE-2025-6971

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOLIDWORKS eDrawings versions prior to SOLIDWORKS Desktop 2025

Description A Use After Free issue exists in the CATPRODUCT file reading procedure. This could allow an attacker to execute arbitrary code when opening a specially crafted CATPRODUCT file.

Recommendations Update to a version of SOLIDWORKS eDrawings newer than SOLIDWORKS Desktop 2025.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2025-6971

ZDI-25-616

Affected Products

Solidworks Desktop

Solidworks Edrawings

References · 7

• https://zerodayinitiative.com/advisories/ZDI-25-616 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-6971 · Security Note
• https://3ds.com/trust-center/security/security-advisories/cve-2025-6971 · Note
• https://twitter.com/CVEnew/status/1945140326059954210 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1945169495380631905 · Twitter Post
• https://twitter.com/cracbot/status/1946887869907489117 · Twitter Post
• https://t.me/cvetracker/27866 · Telegram Post