Uninitialized Variable Issue in SOLIDWORKS eDrawings by Dassault Systèmes
CVE-2025-6974

7.8HIGH

Key Information:

Vendor

Dassault Systèmes

Status
Solidworks Edrawings
Vendor
CVE Published:
15 July 2025

What is CVE-2025-6974?

An uninitialized variable vulnerability exists in the JT file reading process of SOLIDWORKS eDrawings. An attacker could exploit this issue by crafting a specially designed JT file that, when opened, may result in arbitrary code execution. This poses a significant risk to users who may inadvertently open affected files, leading to potential unauthorized access and manipulation of the system.

Affected Version(s)

SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2025 SP0

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-6974 : Uninitialized Variable Issue in SOLIDWORKS eDrawings by Dassault Systèmes