---METADATA---
VENDOR: SOLIDWORKS
PRODUCT: eDrawings
AFFECTED_VERSIONS: SOLIDWORKS Desktop 2025 through 2026
---END_METADATA---

Description Summary:
An Out-Of-Bounds Write vulnerability in the EPRT file reading procedure of SOLIDWORKS eDrawings allows for arbitrary code execution via crafted files.

Executive Summary:
SOLIDWORKS eDrawings is susceptible to an Out-Of-Bounds Write vulnerability that enables remote code execution, posing a high risk to workstations handling CAD data.

Vulnerability Details

CVE-ID: CVE-2026-1335

Affected Software: SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Vulnerability: This vulnerability involves an Out-Of-Bounds Write during the processing of EPRT files. An unauthenticated attacker can leverage this flaw by providing a specially crafted file that, when opened, writes malicious data outside of intended memory boundaries.

Business Impact

Exploitation of this flaw can lead to complete loss of system integrity and the execution of unauthorized commands with user-level permissions. The high CVSS score of 7.8 is justified by the ease with which a malicious file can be distributed via phishing or social engineering to compromise high-value engineering targets.

Remediation Plan

Immediate Action: Deploy the official vendor security patches for SOLIDWORKS Desktop 2025 and 2026 immediately to remediate the vulnerable file-reading function.

Proactive Monitoring: Use endpoint security tools to alert on memory corruption events or unexpected network connections originating from the eDrawings application.

Compensating Controls: Utilize a Web Gateway or Email Security Appliance to scan and block EPRT files containing suspicious structures or those originating from unverified external sources.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation of this vulnerability. The technical nature of an Out-Of-Bounds Write makes it a highly reliable vector for developing stable exploits.

Analyst Recommendation

Immediate remediation is required to protect against potential code execution attacks. Organizations must ensure that all instances of eDrawings are updated to the latest version. Delaying these updates leaves the environment vulnerable to targeted attacks aimed at compromising industrial designs.

---METADATA---
VENDOR: SOLIDWORKS
PRODUCT: eDrawings
AFFECTED_VERSIONS: SOLIDWORKS Desktop 2025 through 2026
---END_METADATA---

Description Summary:
An Out-Of-Bounds Read vulnerability in SOLIDWORKS eDrawings can lead to arbitrary code execution when processing a maliciously crafted EPRT file.

Executive Summary:
A critical memory safety flaw in SOLIDWORKS eDrawings allows attackers to execute arbitrary code on a user's system through the delivery of a compromised EPRT file.

Vulnerability Details

CVE-ID: CVE-2026-1334

Affected Software: SOLIDWORKS eDrawings

Affected Versions: Release SOLIDWORKS Desktop 2025 through Release SOLIDWORKS Desktop 2026

Vulnerability: The application suffers from an Out-Of-Bounds Read vulnerability within the EPRT file reading procedure. An unauthenticated attacker can exploit this by crafting a file that forces the application to read beyond allocated memory buffers during file parsing.

Business Impact

The impact of this vulnerability includes the potential for full system takeover and unauthorized access to sensitive engineering data. Given the CVSS score of 7.8, this represents a significant risk to organizational confidentiality and integrity, as a single user interaction can trigger the exploit.

Remediation Plan

Immediate Action: Update SOLIDWORKS eDrawings to the latest patched version available for the 2025 and 2026 releases to address the memory parsing issue.

Proactive Monitoring: Review system logs for application crashes involving eDrawings, which may indicate failed or successful exploitation attempts.

Compensating Controls: Implement "Least Privilege" principles for users of CAD software and use sandboxing technologies to isolate file-viewing activities from the rest of the network.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 17, 2026, there is no public information indicating active exploitation of this vulnerability. However, memory corruption vulnerabilities in file parsers are common targets for sophisticated threat actors seeking to steal industrial secrets.

Analyst Recommendation

This vulnerability highlights the risk inherent in processing complex file formats. It is imperative that administrators deploy the vendor-supplied security updates immediately. Furthermore, user awareness training regarding the dangers of opening unsolicited files from external vendors should be reinforced.