CVE-2026-1335 PUBLISHED

Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Assigner: 3DS
Reserved: 22.01.2026 Published: 16.02.2026 Updated: 16.02.2026

An Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026 could allow an attacker to execute arbitrary code while opening a specially crafted EPRT file.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Attack Vector	Local	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	High
User Interaction	Required	Availability Impact	High

CVSS 3.1

Product Status

Vendor	Dassault Systèmes
Product	SOLIDWORKS eDrawings
Versions	Default: unaffected affected from Release SOLIDWORKS Desktop 2025 SP0 to Release SOLIDWORKS Desktop 2025 SP5 (incl.) Version Release SOLIDWORKS Desktop 2026 SP0 is affected

References

https://www.3ds.com/trust-center/security/security-advisories/cve-2026-1335

Problem Types

CWE-787 Out-of-bounds Write CWE