CVE-2026-1284CWE-787

Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

High · published January 26, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
19.9
In the wild
Unconfirmed
What it is

⚡ A crafty EPRT file could become your worst nightmare! An out-of-bounds write vulnerability in SOLIDWORKS eDrawings lets attackers execute arbitrary code, and it affects versions from 2025 to 2026! 🔥 Think of it like a chef accidentally cutting through the bottom of a pot while cooking. Instead of just simmering the soup, the hot liquid spills over and damages the entire kitchen! This vulnerability allows attackers to spill their malicious code while opening a seemingly innocent file. This flaw could allow an attacker to run any code they desire on your system, potentially leading to data theft, system compromise, or worse. The consequences can be absolutely devastating if the attacker gains control of your sensitive information or corporate data.

Put simply

Think of it like a chef accidentally cutting through the bottom of a pot while cooking. Instead of just simmering the soup, the hot liquid spills over and damages the entire kitchen! This vulnerability allows attackers to spill their malicious code while opening a seemingly innocent file. The vulnerability stems from out-of-bounds writes occurring during the EPRT file reading procedure in SOLIDWORKS eDrawings, enabling attackers to manipulate memory and execute arbitrary code when a specially crafted EPRT file is opened.

What to do

This flaw could allow an attacker to run any code they desire on your system, potentially leading to data theft, system compromise, or worse. The consequences can be absolutely devastating if the attacker gains control of your sensitive information or corporate data. To protect yourself, ensure you update SOLIDWORKS eDrawings to the latest version as soon as possible. Additionally, educate your users about the risks of opening unfamiliar EPRT files. Regularly review security protocols to ensure such files are handled safely. You've got this! With a little vigilance and the right updates, you can keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00285 · 19.9th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-01-26T13:25Z
EPSS history
Timeline
  • 26 JAN 13:25Z
    Out-Of-Bounds Write vulnerability affecting the EPRT file reading procedure in SOLIDWORKS eDrawings from Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026
    cvelistv5