CVE-2023-2762: Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-07-12 · updated 2026-06-17
Weakness: CWE-416

Description

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

Affected products

Dassault Systèmes SOLIDWORKS Desktop: from 2021 through 2023

References

https://www.3ds.com/vulnerability/advisories
https://www.3ds.com/vulnerability/advisories

Get alerted when CVE-2023-2762 or the next vulnerability affects your stack