CVE-2025-6972: Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Published Jul 15, 2025

Updated

Use After Free vulnerability exists in the CATPRODUCT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted CATPRODUCT file.

Affected Software

1 affected component

Dassault Systèmes eDrawings

Event History

Jul 15, 2025

CVE Published

via MITRE·03:02 PM

Data Sourced

via MITRE·03:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Sep 25, 57523

Event

via FIRST·12:40 AM

Frequently Asked Questions

What is the severity of CVE-2025-6972?

CVE-2025-6972 is classified as a high severity vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2025-6972?

To fix CVE-2025-6972, ensure you update to the latest version of SOLIDWORKS eDrawings as provided by Dassault Systèmes.

What impact does CVE-2025-6972 have on my system?

CVE-2025-6972 can lead to arbitrary code execution, which may compromise your system's integrity and security.

Is CVE-2025-6972 actively exploited?

As of now, there are no confirmed reports of active exploitation of CVE-2025-6972.

Which versions of SOLIDWORKS eDrawings are affected by CVE-2025-6972?

CVE-2025-6972 affects the SOLIDWORKS eDrawings application on Release SOLIDWORKS Desktop 2025.