CVE-2025-6971: Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Published Jul 15, 2025

Updated

Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file.

Affected Software

1 affected component

SolidWorks eDrawings

Event History

Jul 15, 2025

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Sep 25, 57523

Event

via FIRST·02:10 AM

Frequently Asked Questions

What is the severity of CVE-2025-6971?

CVE-2025-6971 is considered a high severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2025-6971?

To fix CVE-2025-6971, update SOLIDWORKS eDrawings to the latest version provided by SOLIDWORKS.

What systems are affected by CVE-2025-6971?

CVE-2025-6971 affects SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025.

What kind of attack does CVE-2025-6971 enable?

CVE-2025-6971 enables attackers to execute arbitrary code through specially crafted CATPRODUCT files.

What is a use after free vulnerability like CVE-2025-6971?

A use after free vulnerability like CVE-2025-6971 occurs when a program continues to use memory after it has been freed, leading to potential exploitation.