CVE-2023-2762

Use-After-Free vulnerability in SLDPRT file reading procedure affecting SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023

State: Published
Severity: 7.8 High
Published: Jul 12, 2023
Updated: Nov 7, 2024
Reserved: May 17, 2023

Read the record on cve.org

Description

A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This vulnerability could allow an attacker to execute arbitrary code while opening a specially crafted SLDPRT file.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	3DS

Weaknesses

CWE-416 Use After Free

Affected Products

Product	Versions
SOLIDWORKS DesktopDassault Systèmes	Release SOLIDWORKS 2021 Golden through Release SOLIDWORKS 2021 SP5.1Affected Release SOLIDWORKS 2022 Golden through Release SOLIDWORKS 2022 SP5Affected Release SOLIDWORKS 2023 Golden through Release SOLIDWORKS 2023 SP2Affected

References

https://www.3ds.com/vulnerability/advisories

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.