CVE-2026-1283CWE-122

Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

High · published January 26, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
19.5
In the wild
Unconfirmed
What it is

🚨 A specially crafted EPRT file is all it takes to unleash chaos! This heap-based buffer overflow in SOLIDWORKS eDrawings could let attackers execute arbitrary code. ⚡ Imagine a restaurant where a diner sneaks in a recipe that causes the cooks to add way too much spice, ruining the entire dish. In this case, the EPRT file is that recipe, overwhelming the system and causing it to behave unpredictably. If exploited, an attacker could gain the power to run malicious code on your system, potentially leading to data loss, unauthorized access, or other severe disruptions. It’s like handing over the chef's hat to someone who just wants to create a culinary disaster!

Put simply

Imagine a restaurant where a diner sneaks in a recipe that causes the cooks to add way too much spice, ruining the entire dish. In this case, the EPRT file is that recipe, overwhelming the system and causing it to behave unpredictably. This vulnerability arises from improper handling of memory in the EPRT file reading procedure, which can lead to a heap-based buffer overflow, allowing an attacker to execute arbitrary code when the file is opened.

What to do

If exploited, an attacker could gain the power to run malicious code on your system, potentially leading to data loss, unauthorized access, or other severe disruptions. It’s like handing over the chef's hat to someone who just wants to create a culinary disaster! To safeguard your system, update SOLIDWORKS eDrawings to the latest version as soon as possible. Review your file handling procedures and educate your team about the risks of opening untrusted files. 🛡️ You've got this! By taking action now, you can lock down your systems and keep the chaos at bay! 💪✨

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00281 · 19.5th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2026-01-26T13:25Z
EPSS history
Timeline
  • 26 JAN 13:25Z
    Heap-based Buffer Overflow vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
    cvelistv5