VULNERABILITY INTELLIGENCE
CVE-2025-1884
CVSS score7.8 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-05-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Use-After-Free vulnerability exists in the SLDPRT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.
Weakness classification
- 3DS.Information-Security@3ds.com: CWE-416