CVE-2023-2762

HIGH

SOLIDWORKS Desktop 2021-2023 - Use-After-Free in SLDPRT File Reading

Title source: llm

Description

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

References (1)

Core 1

Core References

Vendor Advisory

https://www.3ds.com/vulnerability/advisories

Scores

CVSS v3 7.8

EPSS 0.0033

EPSS Percentile 25.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-416

Status published

Products (1)

3ds/3dexperience_solidworks 2021 - 2023

Published Jul 12, 2023

Tracked Since Feb 18, 2026