Use of Uninitialized Variable Vulnerability in SOLIDWORKS eDrawings by Dassault Systèmes
CVE-2026-1333

7.8HIGH

Key Information:

Vendor

Dassault Systèmes

Status
Solidworks Edrawings
Vendor
CVE Published:
16 February 2026

What is CVE-2026-1333?

A vulnerability exists in the EPRT file reading process of SOLIDWORKS eDrawings, versions 2025 and 2026, that stems from the use of an uninitialized variable. When a specially crafted EPRT file is opened, this flaw may allow an attacker to execute arbitrary code, posing a significant security risk to users.

Affected Version(s)

SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2025 SP0

SOLIDWORKS eDrawings Release SOLIDWORKS Desktop 2026 SP0

References

https://www.3ds.com/trust-center/security/security-adviso...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.