Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

SOLIDWORKS eDrawings: Opening Malicious Files Can Execute Code

CVE-2025-7042 · published 1 year ago
Summary

The SOLIDWORKS eDrawings software has a security flaw that could allow an attacker to run malicious code on your computer when opening a specially crafted file. This could potentially lead to data theft, system compromise, or other security issues. To protect yourself, ensure you only open files from trusted sources and keep your software up to date.

Original advisory text
Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary cod...
Use After Free vulnerability exists in the IPT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted IPT file.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published15 Jul 2025
Updated29 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-7042 · NVD
Track software like this
Free during beta