Out-Of-Bounds Write Vulnerability in SOLIDWORKS eDrawings by Dassault Systèmes
CVE-2026-1284

7.8HIGH

Key Information:

Vendor

Dassault Systèmes

Status
Solidworks Edrawings
Vendor
CVE Published:
26 January 2026

What is CVE-2026-1284?

An Out-Of-Bounds Write vulnerability has been identified in the file reading procedure of SOLIDWORKS eDrawings. This flaw affects versions from SOLIDWORKS 2025 to SOLIDWORKS 2026. Attackers could exploit this vulnerability by crafting specific EPRT files, potentially enabling the execution of arbitrary code upon opening these files. This poses a significant threat, as it allows unauthenticated users to manipulate file interactions, leading to unauthorized actions within the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2025 SP0

SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2026 SP0

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.