CVE-2025-6974: Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

Published Jul 15, 2025

Updated

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file.

Affected Software

1 affected component

SolidWorks eDrawings

Event History

Jul 15, 2025

CVE Published

via MITRE·03:04 PM

Data Sourced

via MITRE·03:04 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Sep 25, 57523

Event

via FIRST·01:30 AM

Frequently Asked Questions

What is the severity of CVE-2025-6974?

CVE-2025-6974 has been assigned a severity level that indicates potential exploitability and impact on the affected software.

What is CVE-2025-6974?

CVE-2025-6974 is a use of uninitialized variable vulnerability in the JT file reading procedure of SOLIDWORKS eDrawings that could allow arbitrary code execution.

How do I fix CVE-2025-6974?

To fix CVE-2025-6974, users should update to the latest version of SOLIDWORKS eDrawings provided by the vendor.

Who is affected by CVE-2025-6974?

Users of SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 are affected by CVE-2025-6974.

What could an attacker achieve through CVE-2025-6974?

An attacker could execute arbitrary code on a system by convincing a user to open a specially crafted JT file.