ZDI-CAN-28188: ZDI-26-095: Dassault Systèmes eDrawings Viewer EPRT File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

Published Feb 13, 2026

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Dassault Syst��mes eDrawings Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2026-1284.

Affected Software

1 affected component

Dassault Systèmes eDrawings Viewer

Event History

Feb 13, 2026

Advisory Published

via ZDI·06:00 AM

Data Sourced

via ZDI·06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-28188?

ZDI-CAN-28188 is classified as a remote code execution vulnerability.

How do I fix ZDI-CAN-28188?

To fix ZDI-CAN-28188, ensure you have installed the latest updates for Dassault Systèmes eDrawings Viewer.

What types of attacks can ZDI-CAN-28188 enable?

ZDI-CAN-28188 can enable remote attackers to execute arbitrary code on the affected systems.

Is user interaction required to exploit ZDI-CAN-28188?

Yes, user interaction is required to exploit ZDI-CAN-28188.

Which software versions are affected by ZDI-CAN-28188?

ZDI-CAN-28188 affects installations of Dassault Systèmes eDrawings Viewer.