CVE-2025-6974

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025

CVSS 7.8 HIGHEPSS 0.2%CWE-457

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.8EPSS 0.2%KEV nãoPoC —Patch —

Ciclo de vida

15 jul 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Use of Uninitialized Variable vulnerability exists in the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted JT file.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Produtos afetados

Dassault Systèmes · SOLIDWORKS eDrawings

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.3ds.com/trust-center/security/security-advisories/cve-2025-6974